Ethereal-dev: Re: [ethereal-dev] Should "Follow TCP Stream" filter the display or not?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 25 Aug 1999 17:35:27 -0500
On Wed, Aug 25, 1999 at 05:10:51PM -0500, Ashok Narayanan wrote:
> 
> I think we have an opportunity to do something different
> here. Basically, for a TCP connection, you find all the packets in
> that connection, extract the data portion of those packets, write them
> to a separate (temporary) file, then run a protocol-only decoder on
> that data - perhaps in a separate window. I have some demo code for
> this which I'll send in shortly. This will allow us to write TCP-based
> protocol decoders properly.

Yes, we most definitely want to do this in Ethereal. You're right,
we have the opportunity to do something new and great here in our
open source project.
 
> Thoughts?

If we could somehow get this second level of decoding to put
its information back into the packet CList and proto_tree, to show
a unified view, that would be great. (of course, this could be
turned off or on by the user).

--gilbert