On Tue, 29 Oct 2002, Mudium, Ravi Kumar (Ravi) wrote: > Hi Guy Harris > It is very much useful information for my work.Thank you. > But I have one doubt whether this ring buffer feature is available in > ethereal 0.8.11 version. This is the version we are using. > The recent version seems to be 0.9.7
Then why don't you update? > Regards > Ravi Kumar > > -----Original Message----- > From: Guy Harris [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 29, 2002 2:16 AM > To: Mudium, Ravi Kumar (Ravi) > Cc: [EMAIL PROTECTED] > Subject: Re: [Ethereal-users] NEED HELP > > > On Mon, Oct 28, 2002 at 09:25:23AM +0530, Mudium, Ravi Kumar (Ravi) wrote: > > Hi I am trying to implement a circular file so that I can avoid any crash > of > > ETHEREAL when there is no sufficient space on the disk. > > But I am not able to find out where exactly the write happens in to the > > capture file. > > That's a developer's question, not a user's question, so it should have > gone to [EMAIL PROTECTED]; I'm CCing that list rather than > ethereal-users. > > > Can some one help me in finding out the same. > > In Ethereal, it happens in "capture_pcap_cb()". Look for "wtap_dump". > > Note, however, that the libpcap capture file format that is Ethereal's > native format doesn't support circular files - the N+1st packet in a > capture is always immediately after the Nth packet, it can never be > before that packet. > > Note also that there is already a ring buffer mechanism in Ethereal that > rotates amongst several files. > _______________________________________________ > Ethereal-dev mailing list > [EMAIL PROTECTED] > http://www.ethereal.com/mailman/listinfo/ethereal-dev > -- Regards ----- Richard Sharpe, [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], http://www.richardsharpe.com
