Wireshark · Ethereal-dev: Re: [Ethereal-dev] PATCH - Allow editcap to report # of packets infile

["Olivier Biot" <ethereal@xxxxxxxxxx>]

From: Ian Schorr

| On Jul 27, 2004, at 3:38 PM, Olivier Biot wrote:
|
| > I think one interesting tool is a tool which acts like the *NIX
"file"
| > command which guesses the file type. How about calling this new
tool
| > (which only READS capture files) cap_info, cap_type or cap_file?
The
| > code you wrote fits best in such a new tool.
|
| Is there anything else in particular that you'd like this tool to
do?
| I'm envisioning a read-only utility that would allow reporting of:
|
| - file size (in bytes)
| - file size (in # of packets)
| - capture type
| - encapsulation type
| - timestamp of first packet
| - timestamp of last packet
| - capture duration

If this new tool already provides that information, I'll be very glad
:)

| Anything else?  I tend to prefer that any statistics that require
| dissection remain inside tethereal, and keep this utility relatively
| simple.

Umm... we've already got tethereal for those "other" statistics :)))

| And any other suggestions for a name?  So far I've come up with
viewcap
| or capstat, though I think both of those names are misleading.
Maybe
| capinfo works...

To me capinfo sounds good.

Best regards,

Olivier