If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)

Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

Ethereal and scripting

MiCr0 · 2005-08-19 08:54:42

Hi, does any one know is it possible to do any level of scripting in ethereal? i've got a few 100mb+ captures, which takes a while to filter through to find what i'm looking for. to do something like: ip.addr == (select radius.Framed_IP_Address from radius where radius.Calling_Station_Id == "1234567890")

19-08-2005 09:54AM

#1

MiCr0

Registered Users, Registered Users 2 Posts: 6,265 ✭✭✭

Join Date: February 1998

Posts: 5443

Hi,
does any one know is it possible to do any level of scripting in ethereal?
i've got a few 100mb+ captures, which takes a while to filter through to find what i'm looking for.

to do something like:
ip.addr == (select radius.Framed_IP_Address from radius where radius.Calling_Station_Id == "1234567890")

0

Comments

#2 26-08-2005 04:12PM

gerryk

Registered Users, Registered Users 2 Posts: 1,726 ✭✭✭

Join Date: September 2003

Posts: 1636

Are you doing the filtering retrospectively or at run time? If it's retospectively, can you not just use the usual sed/awk/grep trio?

0
#3 27-08-2005 01:03PM

MiCr0

Registered Users, Registered Users 2 Posts: 6,265 ✭✭✭

Join Date: February 1998

Posts: 5443

can you use them on the libpcap formated files?
i was hoping that there is some option within the ethereal console (or soemthing similar) that would allow this
oh well - i'll add it to the ethereal wish list

0