Ethereal-dev: Re: [ethereal-dev] Follow-the-Stream (was static vs. dynamic columns)

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Fri, 30 Jul 1999 16:59:12 -0500
On Fri, Jul 30, 1999 at 04:43:10PM -0500, Phil Techau wrote:
> 
> 
> Perhaps I misunderstood some of the discussions over the last several
> months regarding follow-the-stream capability.
> 
> I was under the impression that someone was adding hooks so that if an
> application-level protocol message was incomplete, the incomplete part
> of the message would be held based on a hash of the sender/receiver IP
> addresses and ports until the rest of the message was seen.  I think
> someone had started this code (maybe for SMB?), and there was some
> discussion about holding off on decoding too many application-level
> protocols until the general capability was completed, so that every
> application-level protocol-decoding routine didn't have to write (or
> copy) this code.

We have talked about it, but I'm not aware of anyone actually
starting the code. SMB showed this need in a big way.

I'll probably start looking at this after the display filter stuff
settles down, unless someone else starts it before I get a chance.

--gilbert