Ethereal-users: Re: [Ethereal-users] Packet capturing from remote machine without rpcap

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 07 Jan 2005 03:29:36 -0800
ashwin.shirvanthe@xxxxxxxxx wrote:

Is there any way else where I can view packets on real time without the need for manual refresh.

Implement rpcap on the remote device? You said "without rpcap" in the subject line, but why rule that out? The only reason you give for not using ssh and tethereal is that the device has a low memory capacity; does that mean "it's a box running an OS that could, in theory, run ssh and tethereal, but it has limited memory", in which case that OS might run the rpcap daemon as well (I think it runs on Linux and FreeBSD, at least), or does it mean "it's a box running a specialized OS to fit in the limited memory", in which case it might still be possible to port the rpcap daemon to it?