Wireshark · Ethereal-dev: [ethereal-dev] Hashes in Ethereal ...

[Richard Sharpe <sharpe@xxxxxxxxxx>]

Hi,

a few days ago, Gilbert Ramirez suggested that the hash functions and
structures that are in packet-udp should be replaced with glib calls.

I have started to look at the appropriate glib calls, and I will make the
appropriate changes, probably over the Easter break (which is 4 days here
in Oz).

The current hash support allows me to handle tftp and other protocols that
change their port number. Currently, the hash only includes one port
number, but I need to extend it, I think to the 4-tuple <SIP, DIP, SP, DP>.

To simplify life, for any 4-tuple, eg <a.b.c.d, e.f.g.h, i, j>, I will
probably insert the following two:

     <a.b.c.d, e.f.g.h, i, j> and
     <e.f.g.h, a.b.c.d, j, i>

These hash entries will include a dissect routine and the provision for
some state info.

Comments please ...


Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx, NIC-Handle:RJS96
NS Computer Software and Services P/L, 
Ph: +61-8-8281-0063, FAX: +61-8-8250-2080, 
Samba (Team member), Linux, Apache, Digital UNIX, AIX, C, ...