Ethereal-users: RE: [Ethereal-users] Is ethereal the right software for me?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 10 Oct 2005 14:46:51 +0200

Ethereal user support <ethereal-users@xxxxxxxxxxxx> schrieb am 10.10.05 14:05:35:
> 
> Does anyone know of a good tethereal guide somewhere? I'm sitting with the manual for it now and it is somewhat confusing at times. Not really sure what kind of statistics I will be able to get out of the dumps with tethereal. Oh and another question not regarding the usage of ethereal but maybe anyone of you know anyway. I was looking to split some of the tcpdump-files I have so that I could open them in ethereal (the computer cant handle the large files as they are now). I tried using tcpslice but whatever timestamp range I use I only get a 24k file without any valid information. Its either that or getting a copy of the dumpfile if I specify a timestamp range outside the stamps of the file. Anyone know what the problem could be?
> 

There's no real tethereal specific guide (except for the man page). May I suggest that you use Ethereal to get yourself comfortable with the various statistics as the "visual approach" might be a lot faster and the stats should be equal for Ethereal and Tethereal. You can later use Tethereal for "production purpose".

There should be statistics documentation at: http://wiki.ethereal.com/Statistics but the various Statistics devlopers doesn't tend to document their work :-(


I think editcap can split capture files, but I didn't do that myself ...

Regards, ULFL
______________________________________________________________________
XXL-Speicher, PC-Virenschutz, Spartarife & mehr: Nur im WEB.DE Club!		
Jetzt gratis testen! http://freemail.web.de/home/landingpad/?mc=021130