Re: [Ethereal-users] tethereal time filterng?request

[Gerald Combs <gerald@xxxxxxxx>]

On Tue, 14 Nov 2000, Bedri EROL wrote:

> I want tethereal to read the packages on the cable in a determined time interval. Can I do that by a type of filtering? I want to use tethereal for network analyzer. For example it'll give me the packet count in a hour on the cable. Of course I'll execute tethereal by other c progam that I would write? Your suggstions will help me also. Thanks

Ethereal and tethereal don't have this capability, although I believe
it has been discussed in the past.  If you wanted to capture using
tethereal for a specific a mount of time, you could use the following
bit of Bourne shell trickery:

  /usr/sbin/tethereal -w /tmp/cap.out &

  E_PID=$!

  sleep 30

  kill $E_PID 
  
If you simply want to know how many packets or bytes come across the
wire per hour on a continual basis, you might want to look at Ntop,
MRTG, or Cricket:

http://www.ntop.org
http://www.ee.ethz.ch/~oetiker/webtools/mrtg/mrtg.html
http://cricket.sourceforge.net