From: "Fulvio Risso"
Sent: Thursday, April 08, 2004 7:01 PM
Subject: RE: [Ethereal-dev] Idea for ethereal
>> Oh, I didnt know that. I was of the impression that there was
>> just the case
>> that no one
>> wanted to do the actual work themself.
>> Any idea why they dont want it integrated?
>
>Because:
>- code is not well tested (but this is the chicken and egg problem; if you
>do not use the code, you cannot test it)
>- security is very poor (in case you want to use username/password for
>authentication on the remote machine, this travels in clear)
I see. Fair enough.
I guess something like mutual CHAP authentication would be reasonably secure
and simple enough to implement.
It is probably just a matter of getting a volunteer that cares enough to
talk to the tcpdump people what needs to be done
do it and then committing enough time and work to it until it is finished.
If someone wants it badly enough then someone will do what it takes to get
the feature contribution into an acceptable state.
Anyway, thats not my bussiness neither relevant to ethereal. If anyone with
the dedication really wants to get it in libpcap
they should talk to libpcap people and find out what they need to do to get
it accepted into mainline.
