Ethereal or something else for capturing and analyzing packets?

DT4K

Diamond Member
Jan 21, 2002
6,944
3
81
I'm troubleshooting some software I wrote that gets readings from an electronic scale over an ethernet connection.
Basically, I need to see exactly what data is going back and forth between the PC and the scale.
So I'm using Ethereal right now.
It's ok, but I'm just wondering if anyone has recommendations for something better.
 

DT4K

Diamond Member
Jan 21, 2002
6,944
3
81
Nothing is really wrong with it.
To clearly see the data I need, I'm using the "Follow TCP Stream" function.
This combines all the packets(could be 2, could be 10) that belong to one tcp stream into ASCII and gives me a nice list like:
Net + 9392.9 g
Net + 9392.9 g
Net + 9392.9 g
Net + 9392.9 g
Net + 9393.0 g
Net + 9393.0 g

This is what the scale is transmitting.

But I have a ton of packets to look at and going through packets one by one, figuring out where the start of the next stream is, and doing the Follow TCP Stream for each one is tedious. What I would really like to do is get a list like above for all the streams at the same time. I can't find a way to do that in ethereal and was hoping there might be another utility that would do something like that.
 

ScottMac

Moderator<br>Networking<br>Elite member
Mar 19, 2001
5,471
2
0
You should investigate the "Filter" function in Ethereal. You can eliminate all but the target traffic in the display.
I don't recall off the top of my head, but I believe you can do a filter on the capture as well.

Good Luck

Scott