On Sun, Sep 06, 1998 at 06:52:45PM +0200, Laurent Deniel wrote:
> Hannes R. Boehm wrote:
> >
> > On Sun, Sep 06, 1998 at 02:46:37PM +0200, Laurent Deniel wrote:
> > > Hi,
> > >
> > > I have implemented network object name resolving. The current
> > > implemented objects are : IP addresses, UDP and TCP ports.
> > >
> > > All name resolutions use a hash table to optimize lookup time
> > > and a mechanism is implemented to avoid long DNS timeout for
> > > hostname lookups.
> >
> > Do you know the NAI Sniffer ?
> >
> > It does take the RR form DNS packets it has already analyzed instead of
> > making a lookup itself. This way there is no traffic generated by the sniffer.
> > (even if not all IPs show up in the DNS packets it is quite usefull)
> >
>
> Yes but as ethereal analyses dump files, the generated traffic is not
> important (there is no lookup during the capture phase). And I prefer
> to make real lookup since the captured packets may have been filtered
> (i.e. no DNS packets in the file).
Thats right, but:
when you capture in a private LAN, and send the capture file to a friend
(for analization with ethereal) -> he will not be able to do any lookups.
(or he will get other names (since his machine may be located in a
private Internet too.)
anyway: I like your resolving code (especialy that you use hash tables.).
wkr
Hannes
--
--
"The nice thing about standards is that there's so many to choose from."
-- Andrew S. Tanenbaum
!------------------------------------------------------------------!
Hannes R. Boehm
email : hannes@xxxxxxxxx
www : http://hannes.boehm.org
PGP-key : http://hannes.boehm.org/hannes-pgp.asc
!------------------------------------------------------------------!
