Wireshark · Ethereal-dev: Re: [Ethereal-dev] PATCH - Allow editcap to report # of packets infile

[Ian Schorr <ethereal@xxxxxxxxxxxxx>]

On Jul 27, 2004, at 3:38 PM, Olivier Biot wrote:

> I think one interesting tool is a tool which acts like the *NIX "file"
> command which guesses the file type. How about calling this new tool
> (which only READS capture files) cap_info, cap_type or cap_file? The
> code you wrote fits best in such a new tool.

Is there anything else in particular that you'd like this tool to do?  
I'm envisioning a read-only utility that would allow reporting of:

- file size (in bytes)
- file size (in # of packets)
- capture type
- encapsulation type
- timestamp of first packet
- timestamp of last packet
- capture duration

Anything else?  I tend to prefer that any statistics that require 
dissection remain inside tethereal, and keep this utility relatively 
simple.

And any other suggestions for a name?  So far I've come up with viewcap 
or capstat, though I think both of those names are misleading.  Maybe 
capinfo works...

Ian