Ethereal-users: [Ethereal-users] FW: Display Filters on Multiple Files.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Eric Renkoff" <eric.renkoff@xxxxxxxxxx>
Date: Thu, 29 Dec 2005 08:53:15 +0100
 I installed CygWin, but I can not find tethereal for Windows.  Do you
know where I can find it?

Eric

-----Original Message-----
From: Jeff Morriss [mailto:jeff.morriss@xxxxxxxxxxx] 
Sent: Thursday, December 29, 2005 9:26 AM
To: Renkoff, Eric [APC:2914:EXCH]
Subject: Re: Display Filters on Multiple Files.


[IMO it's frequently good to keep discussions on the -users mailing list
so (1) others can respond if they know better or have more time and (2)
others can learn from our discussions.]

Anyway, 'tethereal' is the command line version of Ethereal (no GUI). 
It is available on Windoze though I usually don't install it on my PC
because the command prompts on Windoze are unusuable (IMO).

Using 'tethereal' the way I suggested may be difficult on Windoze
because I don't think the command prompt has a very powerful script
language (but I'm not overly familiar with it).  If you had Cygwin
(http://www.cygwin.com/) on your PC then you could have a Unix-style
shell (bash) where the syntax I showed you would work.

You're right, though that 3.5 Gigabytes is probably too big for a PC to
handle (Ethereal is generally considered to be not very good for use
with huge files).

So, your best options are probably:

- install Cygwin and bash and use Tethereal from that (with the 'for' 
loop I mentioned)
- install Ethtereal on a Unix box and run Tethereal from there

Which of those is better probably depends on what's easier for you
and/or what you're more familiar with.

Also, you mentioned having to "recreate" your display filter: you should
be able to, in Ethereal, just copy the display filter from the display
filter box and use it with 'tethereal' (or another Ethereal session).

Regards,
-Jeff

Eric Renkoff wrote:
> Thanks for the reply, but can you briefly explain what "tethereal" is?

> I have access to plenty of Unix machines but I have Ethereal installed

> on my Windows machine.  Do I have to install Ethereal on a Unix box to

> use the solution that you suggested?  I guess that I will have to 
> somehow re-create my display filter on the Unix machine.  can you 
> explain how to do that, or point me to a page that explains how?  The 
> total size of my 183 files is 3.5 GigaBytes (kind of large for a 
> single merged file, or do you think that it will work that way?).
>  
> Thanks
>  
> Eric