Ethereal-dev: Re: [ethereal-dev] Follow-the-Stream (was static vs. dynamic columns)
On Fri, Jul 30, 1999 at 04:43:10PM -0500, Phil Techau wrote:
>
>
> Perhaps I misunderstood some of the discussions over the last several
> months regarding follow-the-stream capability.
>
> I was under the impression that someone was adding hooks so that if an
> application-level protocol message was incomplete, the incomplete part
> of the message would be held based on a hash of the sender/receiver IP
> addresses and ports until the rest of the message was seen. I think
> someone had started this code (maybe for SMB?), and there was some
> discussion about holding off on decoding too many application-level
> protocols until the general capability was completed, so that every
> application-level protocol-decoding routine didn't have to write (or
> copy) this code.
We have talked about it, but I'm not aware of anyone actually
starting the code. SMB showed this need in a big way.
I'll probably start looking at this after the display filter stuff
settles down, unless someone else starts it before I get a chance.
--gilbert