We're now a non-profit! Support open source packet analysis by making a donation.

Ethereal-dev: Re: [Ethereal-dev] PATCH - Allow editcap to report # of packets infile

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ian Schorr <[email protected]>
Date: Tue, 27 Jul 2004 18:38:44 -0400
On Jul 27, 2004, at 3:38 PM, Olivier Biot wrote:

I think one interesting tool is a tool which acts like the *NIX "file"
command which guesses the file type. How about calling this new tool
(which only READS capture files) cap_info, cap_type or cap_file? The
code you wrote fits best in such a new tool.
Is there anything else in particular that you'd like this tool to do?  
I'm envisioning a read-only utility that would allow reporting of:
- file size (in bytes)
- file size (in # of packets)
- capture type
- encapsulation type
- timestamp of first packet
- timestamp of last packet
- capture duration

Anything else? I tend to prefer that any statistics that require dissection remain inside tethereal, and keep this utility relatively simple.
And any other suggestions for a name?  So far I've come up with viewcap 
or capstat, though I think both of those names are misleading.  Maybe 
capinfo works...