[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Network sniffing tools - Ethereal
- To: Ariel Biener <ariel(at-nospam)fireball.tau.ac.il>
- Subject: Re: Network sniffing tools - Ethereal
- From: Daniel Feiglin <dilogsys(at-nospam)inter.net.il>
- Date: Thu, 17 May 2001 09:56:27 +0300
- CC: IGLU <linux-il(at-nospam)linux.org.il>
- Delivered-To: linux.org.il-linux-il@linux.org.il
- Organization: Dilog Computers Ltd.
- References: <Pine.LNX.4.21_heb2.09.0105162137550.12714-100000@fireball.tau.ac.il>
- Sender: linux-il-bounce(at-nospam)cs.huji.ac.il
- User-Agent: Mozilla/5.0 (X11; U; Linux 2.4.0-4GB i686; en-US; 0.6) Gecko/20010123
Ariel Biener wrote:
> On Wed, 16 May 2001, Daniel Feiglin wrote:
>
>
> Without too much thinking, strace -f ethereal , redirect the output with
> tee to a file as well, and then change the config. Look in the strace
> output file, and you'll see what files it accesses.
>
> --Ariel
>
>
>
>> Hello!
>>
>> Last week there was a discussion about network sniffing tools. One mentioned was
>> ethereal, which is a nice alternative to the venerable tcpdump.
>>
>> I got it going OK, but it has a silly default of sampling ALL protocols. After
>> labouriously switching them all off, but for those I wanted, I found next time
>> around, that my "setup" was not saved anywhere.
>>
>> Does anyone know where Ethereal puts its configuration/setup files? Maybe
>> hacking them might help.
>>
>> (I have searched for *ethereal* in /etc and /usr - nothing helpful.)
>>
>> Regards,
>>
>>
>> Daniel Feiglin
>>
>>
>> =================================================================
>> To unsubscribe, send mail to linux-il-request@linux.org.il with
>> the word "unsubscribe" in the message body, e.g.,run the command
>> echo unsubscribe | mail linux-il-request@linux.org.il
>>
>
>
> --
> Ariel Biener
> e-mail: ariel@post.tau.ac.il
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html
Hello Ariel,
This worked:
strace -e trace=file -o jun.txt ethereal
The tee thing didn't work. man strace, option -o.
And the answer is ...
Look in /root/.ethereal/preferences
What went wrong?
I ran it from a regular user account as super user. (I have ethereal on my
desktop as an icon, with "Run as another user enabled".) For some reason which I
don't care to explore now, it did not set up the above directory and file until
I ran it from an xterm logged in as root i.e.under strace!!
Thanks for the strace idea. I like it!
Regards
Dan Feiglin
=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il