Ethereal-dev: RE: [ethereal-dev] suggested feature...
Well... the old sniffer would just show the selected protocol in the summary
(top) window and do a decode of all protocol levels in the details (middle)
window. SnifferPro does a decode on all protcols in the summary window even
if they aren't selected, ie. selecting UDP will show the NFS decodes.
I did select UDP and found this interesting twist, we have NFS traffic and
the SnifferPro shows the IP continuation packets even though they aren't
really UDP packet. I think that would be really ugly to impliment.
I do use this function on our sniffers and think that the original request
is for a filter that would allow you to limit the display packets to a
certain protocol. Correct me if I'm wrong, this is how I use it.
Jeff Foster
jfoste@xxxxxxxxxxxx
> -----Original Message-----
> From: Gilbert Ramirez [SMTP:gram@xxxxxxxxxx]
> Sent: Tuesday, October 19, 1999 8:30 AM
> To: Jeff Foster
> Cc: 'Guy Harris'; Neulinger, Nathan R.; 'ethereal-dev@xxxxxxxx'
> Subject: Re: [ethereal-dev] suggested feature...
>
> On Tue, Oct 19, 1999 at 07:37:14AM -0500, Jeff Foster wrote:
> >
> > I use sniffers and I can tell you that it doesn't show the protocols
> that
> > aren't selected. I like this feature and would like to see it
> implimented.
>
> But what does it do when a particular protocol is not selected... does
> it show the rest of the packet as data (is if the unselected protocols
> were
> sent through dissect_data() ), or does it just stop processing the
> protocol
> in the middle?
>
> --gilbert
