Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] Running (T)Ethereal forever

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Fri, 3 Sep 2004 08:34:00 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Well we use it to decode packets on the fly 24/7.
But the restarts every so often are enough to prevent OOM killer from
kicking in.

On Thu, 02 Sep 2004 16:37:26 -0700 Guy Harris <gharris@xxxxxxxxx> wrote:
>Richard Sharpe said:
>> What's wrong with using tcpdump?
>
>...with the "-S" option, otherwise tcpdump *also* maintains state
>(per-connection state, so it can show relative sequence numbers).
>
>(I assume it's not being run when writing to a capture file; if
>tcpdump is
>being run with "-w" and a given capture filter, it won't maintain
>per-connection state, as it doesn't dissect packets - but the same
>is true
>of tethereal, so tcpdump vs. tethereal makes no difference in that
>case).
>
>_______________________________________________
>Ethereal-dev mailing list
>Ethereal-dev@xxxxxxxxxxxx
>http://www.ethereal.com/mailman/listinfo/ethereal-dev
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkE4j+cACgkQFh/Ot+gyoF4KtACfQ0idtctpbzPb/C6CNpP3yZ+d4dMA
nRdCRlNJVHkW6ZcbQUH+xQ47IPW+
=fgt0
-----END PGP SIGNATURE-----