Hi,
I use tethereal (command line version included with ethereal) to filter
large traces:
Tethereal -r <infile> -R <filter> -w <savefile>
Where <infile> is the original capture file.
You will need to check the syntax on that filter though - remove the spaces
around the " == " and enclose the whole thing in double quotes for starters
Check out the documentation for full details - you can do lots of really
useful things with tethereal
Regards
Jon
-----Original Message-----
From: David Meagher [mailto:dmeagher@xxxxxxxxx]
Sent: 27 August 2005 15:16
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Ethereal and scripting
Hi,
Does any one know is it possible to do any level of scripting in ethereal?
i've got a few 100mb+ captures, which takes a while to filter through to
find what i'm looking for.
to do something like:
ip.addr == (select radius.Framed_IP_Address from radius where
radius.Calling_Station_Id == "1234567890")
The select/from/where syntax is just used as an example.
I was hoping that there is some option within the ethereal console (or
soemthing similar) that would allow this.
Regards,
David
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
===============================================
NCH, the children's charity, helps children and young people facing difficulties or challenges in their lives. We work with more children and young people, including those affected by poverty, disability and abuse, than any other UK charity. For more information, visit our website at www.nch.org.uk
This e-mail is confidential and intended solely for the use of the individual to whom it is addressed. Any views or opinions presented are solely those of the author and do not necessarily represent those of NCH. If you have received this e-mail in error please contact the sender and delete it from your computer.
NCH routinely monitors the content of emails and this may include any reply that you make to this email.
Registered Charity No. 1097940 / Company No. 4764232
Tel. 020 7704 7000 Fax. 020 7226 2537