Ethereal-users: RE: [Ethereal-users] Newbie ? Looking for NonInteractive sniffer forautomated ta

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "David DuPre'" <dupre@xxxxxxxxxxxxxxx>
Date: Thu, 25 Mar 2004 22:49:09 -0800

Ethereal includes a text mode application that has a command line: Tethereal.exe on the windows version.

 

tethereal [ -vh ] [ -DlLnpqSVx ] [ -a <capture autostop condition> ] ...

        [ -b <number of ring buffer files>[:<duration>] ] [ -c <count> ]

        [ -d <layer_type>==<selector>,<decode_as_protocol> ] ...

        [ -f <capture filter> ] [ -F <output file type> ] [ -i <interface> ]

        [ -N <resolving> ] [ -o <preference setting> ] ... [ -r <infile> ]

        [ -R <read filter> ] [ -s <snaplen> ] [ -t <time stamp format> ]

        [ -T pdml|ps|text ] [ -w <savefile> ] [ -y <link type> ]

        [ -z <statistics string> ]

Valid file type arguments to the "-F" flag:

        libpcap - libpcap (tcpdump, Ethereal, etc.)

        rh6_1libpcap - RedHat Linux 6.1 libpcap (tcpdump)

        suse6_3libpcap - SuSE Linux 6.3 libpcap (tcpdump)

        modlibpcap - modified libpcap (tcpdump)

        nokialibpcap - Nokia libpcap (tcpdump)

        lanalyzer - Novell LANalyzer

        ngsniffer - Network Associates Sniffer (DOS-based)

        snoop - Sun snoop

        netmon1 - Microsoft Network Monitor 1.x

        netmon2 - Microsoft Network Monitor 2.x

        ngwsniffer_1_1 - Network Associates Sniffer (Windows-based) 1.1

        ngwsniffer_2_0 - Network Associates Sniffer (Windows-based) 2.00x

        visual - Visual Networks traffic capture

        5views - Accellent 5Views capture

        niobserverv9 - Network Instruments Observer version 9

        default is libpcap

David

David DuPre'  - Executive PE Consultant
HyPerformix Inc.
Email:
dupre@xxxxxxxxxxxxxxx
Website: www.hyperformix.com

Did you know?

The 2004 HyPerformix Performance Engineering conference is just around the corner.

Visit this link to learn more: http://www.hyperformix.com/Default.asp?Page=113

 

 

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of Janet Norton
Sent:
Thursday, March 25, 2004 7:12 PM
To:
ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Newbie ? Looking for NonInteractive sniffer forautomated task

 

I am new to the sniffer world, but would like to create a application which can monitor the network traffic and capture the contents of information sent to a specific printer.  Our company has a "blackbox server" (I have no access to server) which sends detail to a barcode printer.  I would like to use ethereal (or other) to look for the particular ip and save the contents to a file.  I can determine the EndofFile detail to determine when to stop collecting packets.  But I am not sure if there is a command line version which I can configure the parameters (input/output) for my specific application.  Ideally, I would like an agent or process started which continously runs and creates output file when printer info arrives.  I can use Win2000 or unix environment.  Can someone help me determine if Ethereal would meet me needs or provide an alternate suggestion?  Thanks.