Ethereal-users: Re: [Ethereal-users] Remote Agents

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 26 Jan 2005 11:42:30 -0800
Bartus, Tommy E wrote:

I use your product at home quite often, and I was wandering if you will come up with a remote capture agent.

Probably not.

We'll probably rely on somebody else to do that; we don't do much if any work ourselves on capture, we leave that up to:

on UN*X, the libpcap developers and the developers of the OS and driver code that libpcap uses;

on Windows, the WinPcap developers and the development of the OS and driver code that WinPcap uses.

The WinPcap developers have been working on an extension to libpcap/WinPcap to communicate with a remote capture agent, and on a remote capture agent. That stuff isn't in libpcap at this point. The code isn't, as far as I know, Windows-dependent.

See

	http://winpcap.polito.it/docs/man/html/group__remote__help.html

for some information on it.

I think that's usable from current versions of Ethereal, if your WinPcap has the remote capture stuff (or if you've built a version of libpcap with it and Ethereal's using it) - it's not as friendly as one might like, as I think you'd have to enter something such as "rpcap://hostname/device" to capture on the device named "device" on the host named "hostname", but I think it'd work. At some point a more convenient GUI for that might be added.