Ethereal includes a text mode
application that has a command line: Tethereal.exe on the windows version.
tethereal [ -vh ] [ -DlLnpqSVx ] [ -a
<capture autostop condition> ] ...
[ -b <number of ring buffer
files>[:<duration>] ] [ -c <count> ]
[ -d
<layer_type>==<selector>,<decode_as_protocol> ] ...
[ -f <capture filter> ] [
-F <output file type> ] [ -i <interface> ]
[ -N <resolving> ] [ -o
<preference setting> ] ... [ -r <infile> ]
[ -R <read filter> ] [ -s
<snaplen> ] [ -t <time stamp format> ]
[ -T pdml|ps|text ] [ -w
<savefile> ] [ -y <link type> ]
[ -z <statistics string> ]
Valid file type arguments to the
"-F" flag:
libpcap - libpcap (tcpdump,
Ethereal, etc.)
rh6_1libpcap - RedHat Linux 6.1
libpcap (tcpdump)
suse6_3libpcap - SuSE Linux 6.3
libpcap (tcpdump)
modlibpcap - modified libpcap (tcpdump)
nokialibpcap - Nokia libpcap (tcpdump)
lanalyzer - Novell LANalyzer
ngsniffer - Network Associates
Sniffer (DOS-based)
snoop - Sun snoop
netmon1 - Microsoft Network Monitor
1.x
netmon2 - Microsoft Network
Monitor 2.x
ngwsniffer_1_1 - Network
Associates Sniffer (Windows-based) 1.1
ngwsniffer_2_0 - Network
Associates Sniffer (Windows-based) 2.00x
visual - Visual Networks traffic
capture
5views - Accellent 5Views
capture
niobserverv9 - Network
Instruments Observer version 9
default is libpcap
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On
Behalf Of Janet Norton
Sent: Thursday, March
25, 2004 7:12 PM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Newbie ?
Looking for NonInteractive sniffer forautomated task
I am new to the sniffer world, but
would like to create a application which can monitor the network traffic and
capture the contents of information sent to a specific printer. Our
company has a "blackbox server" (I have no access to server) which
sends detail to a barcode printer. I would like to use ethereal (or
other) to look for the particular ip and save the contents to a file. I
can determine the EndofFile detail to determine when to stop collecting
packets. But I am not sure if there is a command line version which I can
configure the parameters (input/output) for my specific application.
Ideally, I would like an agent or process started which continously runs and
creates output file when printer info arrives. I can use Win2000 or unix
environment. Can someone help me determine if Ethereal would meet me
needs or provide an alternate suggestion? Thanks.