Guy Harris wrote:
>
> Currently, "resolv.c" supports, for addresses:
>
> IPv4
>
> IPv6
>
> Ethernet
>
> the network part of IPX.
>
> Should we add "add_ether_name()", as there's also a hash table for
> Ethernet addresses - and, if we add further hash tables, add other
> "add_XXX_name()" routines?
If they could be used in dissectors, yes ...
Do you have an example of other dissectors that can add such names ?
> It appears you've made "add_host_name()" available to handle the IP(v4)
> part of the
>
> When any dissector figures out a name for a party of any
> comminication, it should register that in a names database.
>
> part of Richard Sharpe's suggestion:
>
> Date: Tue, 20 Jun 2000 14:29:35 +0900
> To: ethereal-dev@xxxxxxxx
...
>
> and made the DNS dissector do that.
>
The add_host_name procedure was already there since the beginning for
that purpose, but I don't know why I never commited these changes in
the DNS dissector...
> Another thing that both Netmon and snoop support is the ability to save
> the address database as a text file - snoop saves only IP addresses in
> "/etc/hosts" format, and NetMon saves all the addresses it knows about.
> Those files can also be read by the dissector, so if you take a capture
> at a given site, you can save the addresses and send them along with the
> capture, so that the recipient of the capture knows what addresses
> correspond to what hosts in that capture.
That sounds interesting.
Laurent.
--
Laurent DENIEL | E-mail: deniel@xxxxxxxxxxx
Paris, FRANCE | laurent.deniel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
| WWW : http://www.worldnet.fr/~deniel
All above opinions are personal, unless stated otherwise.
