Wireshark · Ethereal-dev: Re: [Ethereal-dev] ERTSP: Ethereal's RemoTe Sniffing Protocol

[LEGO <luis.ontanon@xxxxxxxxx>]

On Mon, 14 Feb 2005 08:29:31 -0700 (MST), John McDermott <jjm@xxxxxxxxxx> wrote:
> > Hi,
> >
> >   Here's an idea I had a time ago and I have been building up since
> > then. Finally (thanks to privilege separation) I believe it's use has
> > become feasible. And lately, while reading RFC 3611 (RTCP Extended
> > Reports) I got the final piece I was looking for, so I put down the
> > idea:
> >
> > The Idea is a protocol to have sniffing clients and a sniffing servers
> > communicate. Part like RTSP, and part like RTP+RTCP with
> > retransmissions.
> ...
> > That's what I have until now, any ideas?
> > Any Ideas are welcome.
> >
> > If we add this feature I believe we would have something worth
> > $$$$$$... if we only had a poster. :-)
> 
> This sounds really cool and well thought out.  Maybe I'm missing
> something, though.  What about RMON? Yes, it has another filtering
> language and yes, it is not "real time" in the sense that Ethereal is, but
> mightn't it be an appropriate solution?  Then, Ethereal could
> inter-operate with existing probes and so forth.
> 
> Just a thought.
> 

The point is to be able to use display filters on the remote probe
before packets are transmitted.