Changeset 13659efc
- Timestamp:
- 04/30/2005 03:16:15 PM (19 years ago)
- Branches:
- 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 6.1, 6.2, 6.2.0, 6.2.0-rc1, 6.2.0-rc2, 6.3, 6.3-rc1, 6.3-rc2, 6.3-rc3, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
- Children:
- 0710d944
- Parents:
- 927b60f
- File:
-
- 1 edited
Legend:
- Unmodified
- Added
- Removed
-
basicnet/netutils/ethereal.xml
r927b60f r13659efc 14 14 15 15 <sect1 id="ethereal" xreflabel="Ethereal-ðereal-version;"> 16 <sect1info> 17 <othername>$LastChangedBy$</othername> 18 <date>$Date$</date> 19 </sect1info> 20 <?dbhtml filename="ethereal.html"?> 21 <title>Ethereal-ðereal-version;</title> 22 <indexterm zone="ethereal"> 23 <primary sortas="a-Ethereal">Ethereal</primary> 24 </indexterm> 25 26 <sect2> 27 <title>Introduction to <application>Ethereal</application></title> 28 29 <para>The <application>Ethereal</application> package contains a network 30 protocol analyzer, also known as a <quote>sniffer</quote>. This is useful for 31 analyzing data captured <quote>off the wire</quote> from a live network 32 connection, or data read from a capture file. 33 <application>Ethereal</application> provides both <acronym>GUI</acronym> and 34 <acronym>TTY</acronym>-mode programs for examining captured network packets 35 from over 500 protocols, as well as the capability to read capture files from 36 many other popular network analyzers.</para> 37 38 <sect3><title>Package information</title> 39 <itemizedlist spacing="compact"> 40 <listitem><para>Download (HTTP): 41 <ulink url="ðereal-download-http;"/></para></listitem> 42 <listitem><para>Download (FTP): 43 <ulink url="ðereal-download-ftp;"/></para></listitem> 44 <listitem><para>Download MD5 Sum: ðereal-md5sum;</para></listitem> 45 <listitem><para>Download size: ðereal-size;</para></listitem> 46 <listitem><para>Estimated disk space required: 47 ðereal-buildsize;</para></listitem> 48 <listitem><para>Estimated build time: 49 ðereal-time;</para></listitem></itemizedlist> 50 </sect3> 51 52 <sect3><title><application>Ethereal</application> dependencies</title> 53 <sect4><title>Required</title> 54 <para><xref linkend="GLib"/> or <xref linkend="glib2"/> (to build the 55 <acronym>TTY</acronym>-mode front-end only)</para> 56 </sect4> 57 58 <sect4><title>Recommended</title> 59 <para><xref linkend="libpcap"/> (required to capture data)</para> 60 </sect4> 61 62 <sect4><title>Optional</title> 63 <para><xref linkend="pkgconfig"/>, 64 <xref linkend="GTK"/> or <xref linkend="gtk2"/> (to build the 65 <acronym>GUI</acronym> front-end), 66 <xref linkend="openssl"/>, 67 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>, 68 <xref linkend="python"/>, 69 <xref linkend="pcre"/>, 70 <xref linkend="doxygen"/>, 71 <ulink url="http://www.net-snmp.org/">Net-SNMP</ulink> and 72 <ulink url="http://www.gnu.org/software/adns/adns.html">adns</ulink></para> 73 </sect4> 74 </sect3> 75 76 </sect2> 77 78 <sect2> 79 <title>Installation of <application>Ethereal</application></title> 80 81 <para>Install <application>Ethereal</application> by running the following 82 commands:</para> 83 84 <screen><userinput><command>./configure --prefix=/usr --sysconfdir=/etc \ 16 <?dbhtml filename="ethereal.html"?> 17 18 <sect1info> 19 <othername>$LastChangedBy$</othername> 20 <date>$Date$</date> 21 </sect1info> 22 23 <title>Ethereal-ðereal-version;</title> 24 25 <indexterm zone="ethereal"> 26 <primary sortas="a-Ethereal">Ethereal</primary> 27 </indexterm> 28 29 <sect2 role="package"> 30 <title>Introduction to Ethereal</title> 31 32 <para>The <application>Ethereal</application> package contains a network 33 protocol analyzer, also known as a <quote>sniffer</quote>. This is useful for 34 analyzing data captured <quote>off the wire</quote> from a live network 35 connection, or data read from a capture file. <application>Ethereal</application> 36 provides both GUI and TTY-mode programs for examining captured network packets 37 from over 500 protocols, as well as the capability to read capture files from 38 many other popular network analyzers.</para> 39 40 <bridgehead renderas="sect3">Package Information</bridgehead> 41 <itemizedlist spacing="compact"> 42 <listitem> 43 <para>Download (HTTP): <ulink url="ðereal-download-http;"/></para> 44 </listitem> 45 <listitem> 46 <para>Download (FTP): <ulink url="ðereal-download-ftp;"/></para> 47 </listitem> 48 <listitem> 49 <para>Download MD5 sum: ðereal-md5sum;</para> 50 </listitem> 51 <listitem> 52 <para>Download size: ðereal-size;</para> 53 </listitem> 54 <listitem> 55 <para>Estimated disk space required: ðereal-buildsize;</para> 56 </listitem> 57 <listitem> 58 <para>Estimated build time: ðereal-time;</para></listitem> 59 </itemizedlist> 60 61 <bridgehead renderas="sect3">Ethereal dependencies</bridgehead> 62 63 <bridgehead renderas="sect4">Required</bridgehead> 64 <para><xref linkend="GLib"/> or <xref linkend="glib2"/> (to build the 65 TTY-mode front-end only)</para> 66 67 <bridgehead renderas="sect4">Recommended</bridgehead> 68 <para><xref linkend="libpcap"/> (required to capture data)</para> 69 70 <bridgehead renderas="sect4">Optional</bridgehead> 71 <para><xref linkend="pkgconfig"/>, 72 <xref linkend="GTK"/> or <xref linkend="gtk2"/> (to build the 73 GUI front-end), 74 <xref linkend="openssl"/>, 75 <xref linkend="heimdal"/> or <xref linkend="mitkrb"/>, 76 <xref linkend="python"/>, 77 <xref linkend="pcre"/>, 78 <xref linkend="doxygen"/>, 79 <ulink url="http://www.net-snmp.org/">Net-SNMP</ulink> and 80 <ulink url="http://www.gnu.org/software/adns/adns.html">adns</ulink></para> 81 82 </sect2> 83 84 <sect2 role="kernel" id="ethereal-kernel"> 85 <title>Kernel Configuration</title> 86 87 <para>The kernel must have the Packet protocol enabled for 88 <application>Ethereal</application> to capture live packets from the network. 89 Enable the Packet protocol by choosing <quote>Y</quote> in the 90 <quote>Device Drivers</quote> – <quote>Networking support</quote> 91 – <quote>Networking options</quote> – <quote>Packet socket</quote> 92 configuration parameter. Alternatively, build the af_packet module by choosing 93 <quote>M</quote> in this parameter.</para> 94 95 <indexterm zone="ethereal ethereal-kernel"> 96 <primary sortas="d-Capturing-network-packets">Capturing network 97 packets</primary> 98 </indexterm> 99 100 </sect2> 101 102 <sect2 role="installation"> 103 <title>Installation of Ethereal</title> 104 105 <para>Install <application>Ethereal</application> by running the following 106 commands:</para> 107 108 <screen><userinput>./configure --prefix=/usr --sysconfdir=/etc \ 85 109 --enable-randpkt --enable-threads && 86 make</command></userinput></screen> 87 88 <para>Now, as the root user:</para> 89 90 <screen><userinput role='root'><command>make install</command></userinput></screen> 91 92 </sect2> 93 94 <sect2> 95 <title>Command explanations</title> 96 97 <para><option>--enable-randpkt</option>: This parameter builds the random 98 capture program.</para> 99 100 <para><option>--enable-threads</option>: This parameter enables the use 101 of threads in <command>ethereal</command>.</para> 102 103 <para><option>--with-ssl</option>: This parameter enables the use of the 104 <application>Open<acronym>SSL</acronym></application> 105 <filename class='libraryfile'>libcrypto</filename> library.</para> 106 107 </sect2> 108 109 <sect2> 110 <title>Configuring <application>Ethereal</application></title> 111 112 <sect3 id="ethereal-config"><title>Config files</title> 113 <para><filename>/etc/ethereal.conf</filename> and 114 <filename>~/.ethereal/preferences</filename></para> 115 <indexterm zone="ethereal ethereal-config"> 116 <primary sortas="e-AA.ethereal-preferences">~/.ethereal/preferences</primary> 117 </indexterm> 118 <indexterm zone="ethereal ethereal-config"> 119 <primary sortas="e-etc-ethereal.conf">/etc/ethereal.conf</primary> 120 </indexterm> 121 </sect3> 122 123 <sect3><title>Configuration Information</title> 124 <sect4><title>Package configuration</title> 125 <para>Though the default configuration parameters are very sane, 126 reference the configuration section of the 127 <ulink url="http://www.ethereal.com/docs/user-guide/">Ethereal User's 128 Guide</ulink> for configuration information. Most of 129 <application>Ethereal</application>'s configuration can be accomplished 130 using the menu options of the <command>ethereal</command> 131 <acronym>GUI</acronym> interface.</para> 132 </sect4> 133 134 <sect4 id="ethereal-kernel"><title>Kernel configuration</title> 135 <para>The kernel must have the Packet protocol enabled for 136 <application>Ethereal</application> to capture live packets from the network. 137 Enable the Packet protocol by choosing <quote>Y</quote> in the 138 <quote>Device Drivers</quote> – <quote>Networking support</quote> 139 – <quote>Networking options</quote> – <quote>Packet socket</quote> 140 configuration parameter. Alternatively, build the af_packet module by choosing 141 <quote>M</quote> in this parameter.</para> 142 <indexterm zone="ethereal ethereal-kernel"> 143 <primary sortas="d-Capturing-network-packets">Capturing network 144 packets</primary> 145 </indexterm> 146 147 <para>Note: If you want to look at packets, make sure you don't filter 148 them out with <xref linkend="iptables"/>. If you want to exclude 149 certain classes of packets, it is more efficient to do it with 150 <application>iptables</application> than 151 <application>Ethereal</application>.</para> 152 </sect4> 153 </sect3> 154 155 </sect2> 156 157 <sect2> 158 <title>Contents</title> 159 160 <segmentedlist> 161 <segtitle>Installed Programs</segtitle> 162 <segtitle>Installed Libraries</segtitle> 163 <segtitle>Installed Directories</segtitle> 164 165 <seglistitem> 166 <seg>capinfos, dftest, editcap, ethereal, idl2eth, mergecap, randpkt, 167 tethereal and text2pcap</seg> 168 <seg>libethereal.so, libwiretap.so and numerous dissector plugin modules</seg> 169 <seg>/usr/lib/ethereal and /usr/share/ethereal</seg> 170 </seglistitem> 171 </segmentedlist> 172 173 <variablelist> 174 <bridgehead renderas="sect3">Short Descriptions</bridgehead> 175 <?dbfo list-presentation="list"?> 176 177 <varlistentry id="capinfos"> 178 <term><command>capinfos</command></term> 179 <listitem><para>reads a saved capture file and returns any or all of several 180 statistics about that file. It is able to detect and read any capture 181 supported by the <application>Ethereal</application> package.</para> 182 <indexterm zone="ethereal capinfos"> 183 <primary sortas="b-capinfos">capinfos</primary> 184 </indexterm></listitem> 185 </varlistentry> 186 187 <varlistentry id="dftest"> 188 <term><command>dftest</command></term> 189 <listitem><para>is a display-filter-compiler test program.</para> 190 <indexterm zone="ethereal dftest"> 191 <primary sortas="b-dftest">dftest</primary> 192 </indexterm></listitem> 193 </varlistentry> 194 195 <varlistentry id="editcap"> 196 <term><command>editcap</command></term> 197 <listitem><para>edits and/or translates the format of capture files. It knows 198 how to read <application>libpcap</application> capture files, including those 199 of <command>tcpdump</command>, <application>Ethereal</application> and other 200 tools that write captures in that format.</para> 201 <indexterm zone="ethereal editcap"> 202 <primary sortas="b-editcap">editcap</primary> 203 </indexterm></listitem> 204 </varlistentry> 205 206 <varlistentry id="ethereal-prog"> 207 <term><command>ethereal</command></term> 208 <listitem><para>is a <acronym>GUI</acronym> network protocol analyzer. It lets 209 you interactively browse packet data from a live network or from a previously 210 saved capture file.</para> 211 <indexterm zone="ethereal ethereal-prog"> 212 <primary sortas="b-ethereal">ethereal</primary> 213 </indexterm></listitem> 214 </varlistentry> 215 216 <varlistentry id="idl2eth"> 217 <term><command>idl2eth</command></term> 218 <listitem><para>takes a user specified <acronym>CORBA</acronym> 219 <acronym>IDL</acronym> file and generates <quote>C</quote> source code that 220 can be used to create an <application>Ethereal</application> plugin.</para> 221 <indexterm zone="ethereal idl2eth"> 222 <primary sortas="b-idl2eth">idl2eth</primary> 223 </indexterm></listitem> 224 </varlistentry> 225 226 <varlistentry id="mergecap"> 227 <term><command>mergecap</command></term> 228 <listitem><para>combines multiple saved capture files into a single output 229 file.</para> 230 <indexterm zone="ethereal mergecap"> 231 <primary sortas="b-mergecap">mergecap</primary> 232 </indexterm></listitem> 233 </varlistentry> 234 235 <varlistentry id="randpkt"> 236 <term><command>randpkt</command></term> 237 <listitem><para>creates random-packet capture files.</para> 238 <indexterm zone="ethereal randpkt"> 239 <primary sortas="b-randpkt">randpkt</primary> 240 </indexterm></listitem> 241 </varlistentry> 242 243 <varlistentry id="tethereal"> 244 <term><command>tethereal</command></term> 245 <listitem><para>is a <acronym>TTY</acronym>-mode network protocol analyzer. 246 It lets you capture packet data from a live network or read packets from a 247 previously saved capture file.</para> 248 <indexterm zone="ethereal tethereal"> 249 <primary sortas="b-tethereal">tethereal</primary> 250 </indexterm></listitem> 251 </varlistentry> 252 253 <varlistentry id="text2pcap"> 254 <term><command>text2pcap</command></term> 255 <listitem><para>reads in an <acronym>ASCII</acronym> hex dump and writes the 256 data described into a <application>libpcap</application>-style capture 257 file.</para> 258 <indexterm zone="ethereal text2pcap"> 259 <primary sortas="b-text2pcap">text2pcap</primary> 260 </indexterm></listitem> 261 </varlistentry> 262 263 <varlistentry id="libethereal"> 264 <term><filename class='libraryfile'>libethereal.so</filename></term> 265 <listitem><para>contains functions used by the 266 <application>Ethereal</application> programs to perform filtering and 267 packet capturing.</para> 268 <indexterm zone="ethereal libethereal"> 269 <primary sortas="c-libethereal">libethereal.so</primary> 270 </indexterm></listitem> 271 </varlistentry> 272 273 <varlistentry id="libwiretap"> 274 <term><filename class='libraryfile'>libwiretap.so</filename></term> 275 <listitem><para>is a library being developed as a future replacement for 276 <filename class='libraryfile'>libpcap</filename>, the current standard Unix 277 library for packet capturing. For more information, see the 278 <filename>README</filename> file in the source 279 <filename class='directory'>wiretap</filename> directory.</para> 280 <indexterm zone="ethereal libwiretap"> 281 <primary sortas="c-libwiretap">libwiretap.so</primary> 282 </indexterm></listitem> 283 </varlistentry> 284 </variablelist> 285 286 </sect2> 110 make</userinput></screen> 111 112 <para>Now, as the <systemitem class="username">root</systemitem> user:</para> 113 114 <screen role="root"><userinput>make install</userinput></screen> 115 116 </sect2> 117 118 <sect2 role="commands"> 119 <title>Command Explanations</title> 120 121 <para><parameter>--enable-randpkt</parameter>: This parameter builds the random 122 capture program.</para> 123 124 <para><parameter>--enable-threads</parameter>: This parameter enables the use 125 of threads in <command>ethereal</command>.</para> 126 127 <para><option>--with-ssl</option>: This parameter enables the use of the 128 <application>OpenSSL</application> 129 <filename class='libraryfile'>libcrypto</filename> library.</para> 130 131 </sect2> 132 133 <sect2 role="configuration"> 134 <title>Configuring Ethereal</title> 135 136 <sect3 id="ethereal-config"> 137 <title>Config Files</title> 138 139 <para><filename>/etc/ethereal.conf</filename> and 140 <filename>~/.ethereal/preferences</filename></para> 141 142 <indexterm zone="ethereal ethereal-config"> 143 <primary sortas="e-AA.ethereal-preferences">~/.ethereal/preferences</primary> 144 </indexterm> 145 146 <indexterm zone="ethereal ethereal-config"> 147 <primary sortas="e-etc-ethereal.conf">/etc/ethereal.conf</primary> 148 </indexterm> 149 150 </sect3> 151 152 <sect3> 153 <title>Configuration Information</title> 154 155 <para>Though the default configuration parameters are very sane, 156 reference the configuration section of the 157 <ulink url="http://www.ethereal.com/docs/user-guide/">Ethereal User's 158 Guide</ulink> for configuration information. Most of 159 <application>Ethereal</application>'s configuration can be accomplished 160 using the menu options of the <command>ethereal</command> 161 GUI interface.</para> 162 163 <note> 164 <para>If you want to look at packets, make sure you don't filter 165 them out with <xref linkend="iptables"/>. If you want to exclude 166 certain classes of packets, it is more efficient to do it with 167 <application>iptables</application> than 168 <application>Ethereal</application>.</para> 169 </note> 170 171 </sect3> 172 173 </sect2> 174 175 <sect2 role="content"> 176 <title>Contents</title> 177 178 <segmentedlist> 179 <segtitle>Installed Programs</segtitle> 180 <segtitle>Installed Libraries</segtitle> 181 <segtitle>Installed Directories</segtitle> 182 183 <seglistitem> 184 <seg>capinfos, dftest, editcap, ethereal, idl2eth, mergecap, randpkt, 185 tethereal and text2pcap</seg> 186 <seg>libethereal.so, libwiretap.so and numerous dissector plugin modules</seg> 187 <seg>/usr/lib/ethereal and /usr/share/ethereal</seg> 188 </seglistitem> 189 </segmentedlist> 190 191 <variablelist> 192 <bridgehead renderas="sect3">Short Descriptions</bridgehead> 193 <?dbfo list-presentation="list"?> 194 <?dbhtml list-presentation="table"?> 195 196 <varlistentry id="capinfos"> 197 <term><command>capinfos</command></term> 198 <listitem> 199 <para>reads a saved capture file and returns any or all of several 200 statistics about that file. It is able to detect and read any capture 201 supported by the <application>Ethereal</application> package.</para> 202 <indexterm zone="ethereal capinfos"> 203 <primary sortas="b-capinfos">capinfos</primary> 204 </indexterm> 205 </listitem> 206 </varlistentry> 207 208 <varlistentry id="dftest"> 209 <term><command>dftest</command></term> 210 <listitem> 211 <para>is a display-filter-compiler test program.</para> 212 <indexterm zone="ethereal dftest"> 213 <primary sortas="b-dftest">dftest</primary> 214 </indexterm> 215 </listitem> 216 </varlistentry> 217 218 <varlistentry id="editcap"> 219 <term><command>editcap</command></term> 220 <listitem> 221 <para>edits and/or translates the format of capture files. It knows 222 how to read <application>libpcap</application> capture files, including those 223 of <command>tcpdump</command>, <application>Ethereal</application> and other 224 tools that write captures in that format.</para> 225 <indexterm zone="ethereal editcap"> 226 <primary sortas="b-editcap">editcap</primary> 227 </indexterm> 228 </listitem> 229 </varlistentry> 230 231 <varlistentry id="ethereal-prog"> 232 <term><command>ethereal</command></term> 233 <listitem> 234 <para>is a GUI network protocol analyzer. It lets 235 you interactively browse packet data from a live network or from a previously 236 saved capture file.</para> 237 <indexterm zone="ethereal ethereal-prog"> 238 <primary sortas="b-ethereal">ethereal</primary> 239 </indexterm> 240 </listitem> 241 </varlistentry> 242 243 <varlistentry id="idl2eth"> 244 <term><command>idl2eth</command></term> 245 <listitem> 246 <para>takes a user specified CORBA 247 IDL file and generates <quote>C</quote> source code that 248 can be used to create an <application>Ethereal</application> plugin.</para> 249 <indexterm zone="ethereal idl2eth"> 250 <primary sortas="b-idl2eth">idl2eth</primary> 251 </indexterm> 252 </listitem> 253 </varlistentry> 254 255 <varlistentry id="mergecap"> 256 <term><command>mergecap</command></term> 257 <listitem> 258 <para>combines multiple saved capture files into a single output 259 file.</para> 260 <indexterm zone="ethereal mergecap"> 261 <primary sortas="b-mergecap">mergecap</primary> 262 </indexterm> 263 </listitem> 264 </varlistentry> 265 266 <varlistentry id="randpkt"> 267 <term><command>randpkt</command></term> 268 <listitem> 269 <para>creates random-packet capture files.</para> 270 <indexterm zone="ethereal randpkt"> 271 <primary sortas="b-randpkt">randpkt</primary> 272 </indexterm> 273 </listitem> 274 </varlistentry> 275 276 <varlistentry id="tethereal"> 277 <term><command>tethereal</command></term> 278 <listitem> 279 <para>is a TTY-mode network protocol analyzer. 280 It lets you capture packet data from a live network or read packets from a 281 previously saved capture file.</para> 282 <indexterm zone="ethereal tethereal"> 283 <primary sortas="b-tethereal">tethereal</primary> 284 </indexterm> 285 </listitem> 286 </varlistentry> 287 288 <varlistentry id="text2pcap"> 289 <term><command>text2pcap</command></term> 290 <listitem> 291 <para>reads in an ASCII hex dump and writes the 292 data described into a <application>libpcap</application>-style capture 293 file.</para> 294 <indexterm zone="ethereal text2pcap"> 295 <primary sortas="b-text2pcap">text2pcap</primary> 296 </indexterm> 297 </listitem> 298 </varlistentry> 299 300 <varlistentry id="libethereal"> 301 <term><filename class='libraryfile'>libethereal.so</filename></term> 302 <listitem> 303 <para>contains functions used by the 304 <application>Ethereal</application> programs to perform filtering and 305 packet capturing.</para> 306 <indexterm zone="ethereal libethereal"> 307 <primary sortas="c-libethereal">libethereal.so</primary> 308 </indexterm> 309 </listitem> 310 </varlistentry> 311 312 <varlistentry id="libwiretap"> 313 <term><filename class='libraryfile'>libwiretap.so</filename></term> 314 <listitem> 315 <para>is a library being developed as a future replacement for 316 <filename class='libraryfile'>libpcap</filename>, the current standard Unix 317 library for packet capturing. For more information, see the 318 <filename>README</filename> file in the source 319 <filename class='directory'>wiretap</filename> directory.</para> 320 <indexterm zone="ethereal libwiretap"> 321 <primary sortas="c-libwiretap">libwiretap.so</primary> 322 </indexterm> 323 </listitem> 324 </varlistentry> 325 326 </variablelist> 327 328 </sect2> 287 329 288 330 </sect1>
Note:
See TracChangeset
for help on using the changeset viewer.