Ethereal

[Ethereal-users] Reading tcpdump files while still sniffing
Google
 
Web Ethereal.com

Home | Introduction | Documentation | Lists | FAQ | Development | Wiki | Bugs

Ethereal-users: July 2006


Hi all,

I am trying to access a tcpdump file created by
tcpdump -i /dev/eth0 -w dumpfile
with ethereal WHILE the dump is still running (and the file keeps growing).

Can ethereal "attach" to this file and report the packets as they are
written to the dumpfile?

Background: I want to set up 2-3 instances of Ethereal which read the
dumpfile but display only parts of the traffic by employing filters.

Are there other solutions?

Best regards,
Dominik

Powered by MHonArc 2.6.10