Ethereal-users: Re: [Ethereal-users] FW: Display Filters on Multiple Files.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Thu, 29 Dec 2005 16:52:21 +0800

It should be in the same directory as the rest of Ethereal (something like C:\Program Files\Ethereal) though it's possible to choose not to install it (in which case you could reinstall Ethereal).

Eric Renkoff wrote:
 I installed CygWin, but I can not find tethereal for Windows.  Do you
know where I can find it?

Eric

-----Original Message-----
From: Jeff Morriss [mailto:jeff.morriss@xxxxxxxxxxx] Sent: Thursday, December 29, 2005 9:26 AM
To: Renkoff, Eric [APC:2914:EXCH]
Subject: Re: Display Filters on Multiple Files.


[IMO it's frequently good to keep discussions on the -users mailing list
so (1) others can respond if they know better or have more time and (2)
others can learn from our discussions.]

Anyway, 'tethereal' is the command line version of Ethereal (no GUI). It is available on Windoze though I usually don't install it on my PC
because the command prompts on Windoze are unusuable (IMO).

Using 'tethereal' the way I suggested may be difficult on Windoze
because I don't think the command prompt has a very powerful script
language (but I'm not overly familiar with it).  If you had Cygwin
(http://www.cygwin.com/) on your PC then you could have a Unix-style
shell (bash) where the syntax I showed you would work.

You're right, though that 3.5 Gigabytes is probably too big for a PC to
handle (Ethereal is generally considered to be not very good for use
with huge files).

So, your best options are probably:

- install Cygwin and bash and use Tethereal from that (with the 'for' loop I mentioned)
- install Ethtereal on a Unix box and run Tethereal from there

Which of those is better probably depends on what's easier for you
and/or what you're more familiar with.

Also, you mentioned having to "recreate" your display filter: you should
be able to, in Ethereal, just copy the display filter from the display
filter box and use it with 'tethereal' (or another Ethereal session).

Regards,
-Jeff

Eric Renkoff wrote:

Thanks for the reply, but can you briefly explain what "tethereal" is?


I have access to plenty of Unix machines but I have Ethereal installed


on my Windows machine.  Do I have to install Ethereal on a Unix box to


use the solution that you suggested? I guess that I will have to somehow re-create my display filter on the Unix machine. can you explain how to do that, or point me to a page that explains how? The total size of my 183 files is 3.5 GigaBytes (kind of large for a single merged file, or do you think that it will work that way?).

Thanks

Eric


_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users