Wireshark · Ethereal-dev: Re: [Ethereal-dev] stdin capture

[Guy Harris <guy@xxxxxxxxxxxx>]

On Sep 27, 2003, at 10:03 AM, Gisle Vanem wrote:

> Using tethereal build from yesterdays snapshot to capture from stdin
> produces weird results. Like:
>   tethereal -nr- | more

Read from stdin, or capture from stdin?

What is tethereal's standard input?  Is it being piped to?  Note that 
Wiretap doesn't support reading from non-seekable input sources; pipes 
are non-seekable input sources on UNIX, and are probably non-seekable 
on Windows as well.  At least on UNIX, it supports "capturing" from a 
pipe, however (it assumes that the input is in standard libpcap format, 
so it doesn't do the file-format checks it does when opening capture 
files - those checks are currently done by reading the input multiple 
times by seeking backwards and re-reading).