[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Network sniffing tools - Ethereal



Ariel Biener wrote:

> On Wed, 16 May 2001, Daniel Feiglin wrote:
> 
> 
> Without too much thinking, strace -f ethereal , redirect the output with
> tee to a file as well, and then change the config. Look in the strace
> output file, and you'll see what files it accesses.
> 
> --Ariel
> 
> 
> 
>> Hello!
>> 
>> Last week there was a discussion about network sniffing tools. One mentioned was
>> ethereal, which is a nice alternative to the venerable tcpdump.
>> 
>> I got it going OK, but it has a silly default of sampling ALL protocols. After
>> labouriously switching them all off, but for those I wanted, I found next time
>> around, that my "setup" was not saved anywhere.
>> 
>> Does anyone know where Ethereal puts its configuration/setup files? Maybe
>> hacking them might help.
>> 
>> (I have searched for *ethereal* in /etc and /usr - nothing helpful.)
>> 
>> Regards,
>> 
>> 
>> Daniel Feiglin
>> 
>> 
>> =================================================================
>> To unsubscribe, send mail to linux-il-request@linux.org.il with
>> the word "unsubscribe" in the message body, e.g.,run the command
>> echo unsubscribe | mail linux-il-request@linux.org.il
>> 
> 
> 
> --
> Ariel Biener
> e-mail: ariel@post.tau.ac.il
> PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html


Hello Ariel,

This worked:

strace -e trace=file -o jun.txt ethereal

The tee thing didn't work. man strace, option -o.

And the answer is ...

Look in /root/.ethereal/preferences

What went wrong?

I ran it from a regular user account as super user. (I have ethereal on my 
desktop as an icon, with "Run as another user enabled".) For some reason which I 
don't care to explore now, it did not set up the above directory and file until 
I ran it from an xterm logged in as root i.e.under strace!!

Thanks for the strace idea. I like it!

Regards

Dan Feiglin


=================================================================
To unsubscribe, send mail to linux-il-request@linux.org.il with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail linux-il-request@linux.org.il