Hello Luca,

> On wireshark(1) they say this works only if you have a libpcap format on
> wireshark's STDIN, but in this way you'll have pure ethernet frames.

Damn it ! I didn't think of this problem.

> Does Netkit support uml's vde network?
> If it does then you can use the 'pdump' plugin in vde_switch which dumps
> all the traffic in pcap format.

I don't think so (I didn't see reference to vde_switch in netkit
distribution).

One idea is to do the same think: use pdump on uml_switch (vde_switch
seems close to uml_switch, right ?).

An other idea  could be to extend uml_switch to dump traffic on standard
output in cap format. Don't seem too difficult (include libcap is
needed, and some code of course).

The only problem is how to connect the standard input of wireshark and
the standard output of this "new" uml_switch; netcat is an interesting
"brut hack" to do this (not really "elegant") but maybe some people have
a better solution ????

Cheers,

Julien.

> Here you can find an example of pdump usage:
> http://qemu-forum.ipi.fi/viewtopic.php?f=2&p=13488#p13488
> 
> 
> HTH
> 
> luca
> 


-- 
Trouble-a-cat Limited