Ethereal-dev: [ethereal-dev] Follow-the-Stream (was static vs. dynamic columns)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Phil Techau <phil@xxxxxxxxxxxxxxxx>
Date: Thu, 29 Jul 1999 17:39:30 -0400
Perhaps I misunderstood some of the discussions over the last several
months regarding follow-the-stream capability.

I was under the impression that someone was adding hooks so that if an
application-level protocol message was incomplete, the incomplete part
of the message would be held based on a hash of the sender/receiver IP
addresses and ports until the rest of the message was seen.  I think
someone had started this code (maybe for SMB?), and there was some
discussion about holding off on decoding too many application-level
protocols until the general capability was completed, so that every
application-level protocol-decoding routine didn't have to write (or
copy) this code.

Is anyone working on this?

Thanks,

Phil Techau