When using etherape to analyze long packet captures, the "real-time" mode is frustrating. This patch adds a command line option to disable the inter-packet timing analysis, and just read the capture file as fast as possible, and then draw the diagram once. This provides a fast way to analyze conversations occuring in long packet captures. Fix: The patch below applies to /usr/ports/net-mgmt/etherape/work/etherape-0.9.1/src . ie: # cd /usr/ports/net-mgmt/etherape # make extract # cd work/etherape-0.9.1/src # patch < the_patch_below # cd /usr/ports/net-mgmt/etherape # make install The patch below has been submitted to the etherape developers as well. However, based on their project at sourceforge, it seems that the main project seems to be moving rather slowly at the moment. How-To-Repeat: Using tcpdump, capture an hour's worth of low, volume traffic - DNS/SMTP/HTTP traffic on one workstation should suffice - to a file. Open the capture file in etherape, and watch it draw the graph. Note, this will take an hour. The patch below will cause the graph to be drawn as quickly as possible when the "-z" or "--zero-delay" flag is added on the command line.
State Changed From-To: open->feedback Awaiting maintainers feedback
State Changed From-To: feedback->closed Committed. Thanks!