Ethereal-users: RE: [Ethereal-users] Sniffer Matrix functionality - connection gr aph for Ethere

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Urwin <RUrwin@xxxxxxxxxxxxxx>
Date: Mon, 19 Apr 2004 10:24:29 +0100
> From: Andrew Hood [mailto:ajhood@xxxxxxxxx]
> I found replacing
> 
> tethereal -r $ipf -N mnt | cut -b 8- | cut --fields=2-4 
> --delimiter=' '
> |sed "s/->/###/;s/^  $//"| sort |uniq > raw
> 
> with
> 
> tethereal -r $ipf -N Cmnt | awk '$4=="->"{print 
> $3,"###",$5;}' | sort |
> uniq > raw
> 
> worked better.


Ahh. An awk guru. Thanks for that, it is much better.
 
> The former has some issues with ADNS (hence the Coption)

I found that C didn't resolve names, whereas the original did, and didn't
cause problems. Caveat Emptor.

> Don't feed it large files (i.e. lots of nodes). It will take 
> forever to
> run. If not longer.

The vlan capture sample shows about the biggest node set you might find
useful, and the reasons why: http://www.ethereal.com/sample/vlan.cap.gz


I've just installed the script on my W2k system here and it works fine,
except that I have to tell it where to find tethereal, which in the Windows
world isn't on the PATH.
So either add the ethereal directory to the path, or make the above line
start like this:
"/cygdrive/c/Program Files/Ethereal/tethereal" -r $ipf ...
(the c is the drive letter)

Similarly, if you have Ghostview installed you'll have to do something
similar if you want to use the -d option.

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________