>6/19/03 4:02:49 PM, Guy Harris <[EMAIL PROTECTED]> wrote: > >On Thursday, June 19, 2003, at 12:58PM, Joe Acquisto wrote: > >> Any truth to a statement I heard that tcpdump is the "backend" for >> ethereal? > >None whatsoever. Ethereal has its own packet dissecting code, >unrelated to tcpdump's packet dissecting code. > >Ethereal and tcpdump both use the same library to do packet capture - >libpcap - but that's the only code they share. (They don't even use >the same code to read capture files; tcpdump uses libpcap, but Ethereal >has its own code, which can read libpcap-format files, but can also >read other capture file formats as well.) > >
Thanks. I will use this info with relish (or maybe mustard) at my next opportunity. joea/
