Ethereal Packet Sniffing
This book provides insider information on how to optimize performance of Ethereal on enterprise networks, and shows how Ethereal compiles and runs on many flavors of UNIX and Windows.
TABLE OF CONTENTS Ethereal Packet Sniffing
Using Command Line Options
Ethereal supports a large number of command line options to control its behavior when first run. This section will document some of the most commonly used options. Several of the other options are used to manipulate certain aspects of the GUI (font, height of Summary Window, Protocol Tree Window, Data Window, etc.) or set elements like link type or automatic scrolling. However, these options are not as common and will not be covered in this section.
Capture and File Options
The most commonly used Ethereal options are those related to captures and files. Table 4.18 lists some of the most common command line options related to these tasks.
| Command Line Option | Description |
|---|---|
| -i | Set the name of the interface used for live captures to |
| -k | Start capture immediately. This requires the i option. |
| -a | Sets an autostop condition for the capture. |
| -c | Sets the number of packets to read before stopping the capture. After |
| -r | Read the capture saved in |
| -w | Write the capture to |
| -b | Enable the use of |
Copyright Syngress Publishing, Inc. 2004 under license agreement with Books24x7
