Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.

https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.

Ethereal and scripting

MiCr0 · 2005-08-19 08:54:42

Hi, does any one know is it possible to do any level of scripting in ethereal? i've got a few 100mb+ captures, which takes a while to filter through to find what i'm looking for. to do something like: ip.addr == (select radius.Framed_IP_Address from radius where radius.Calling_Station_Id == "1234567890")

19-08-2005 08:54AM

#1

MiCr0

Registered Users, Registered Users 2 Posts: 6,265 ✭✭✭

Join Date: February 1998

Posts: 5443

Hi,
does any one know is it possible to do any level of scripting in ethereal?
i've got a few 100mb+ captures, which takes a while to filter through to find what i'm looking for.

to do something like:
ip.addr == (select radius.Framed_IP_Address from radius where radius.Calling_Station_Id == "1234567890")

0

Comments

#2 26-08-2005 03:12PM

gerryk

Registered Users, Registered Users 2 Posts: 1,726 ✭✭✭

Join Date: September 2003

Posts: 1636

Are you doing the filtering retrospectively or at run time? If it's retospectively, can you not just use the usual sed/awk/grep trio?

0
#3 27-08-2005 12:03PM

MiCr0

Registered Users, Registered Users 2 Posts: 6,265 ✭✭✭

Join Date: February 1998

Posts: 5443

can you use them on the libpcap formated files?
i was hoping that there is some option within the ethereal console (or soemthing similar) that would allow this
oh well - i'll add it to the ethereal wish list

0