Wireshark · Ethereal-dev: Re: [Ethereal-dev] Next steps for privilege separation, some capture engine questions...

["John McDermott" <jjm@xxxxxxxxxx>]

On Mon, 07 Feb 2005 22:31:17 +0100, Ulf Lamping <ulf.lamping@xxxxxx> wrote:

> 2.) Enable the capture child code to handle the multiple files feature,  
> as this seems to be the last "big" feature missing before being able to  
> always use the child mode for capturing :-)
> 3.) Always use the child mode for capturing, regardless of the "Update  
> list of packets in Real Time" setting ;-)
...
> Before it comes to 3.), 4.) and 5.) I have to do some more research.
...
> To 2.) How do I bring it to handle multiple files in capture child mode?  
> The main problem I have is: how do I get the "last valid" ringbuffer  
> filename from the capture child back into the main Ethereal task?

Could you tell it via the sync_pipe?  There may be some issues if the  
child ends ungracefully, however.  To avoid that, perhaps you could have  
the client write it to a file in /tmp (or %TEMP% or whatever) each time it  
opens a file.

--john


--
John McDermott, CCP
Writer, Educator, Consultant
jjm@xxxxxxxxxx        www.jkintl.com
V: +1 505/377-6293  F: +1 505/377-6313