Ethereal-dev: Re: [ethereal-dev] conversation wildcard entry

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Frank Singleton <frank.singleton@xxxxxxxxxxxx>
Date: Wed, 27 Sep 2000 07:17:27 -0500
andreas.sikkema@xxxxxxxxxxx wrote:

> 
> I used a "fake" address. When my heuristic dissector is called it
> checks it's destination and source port if it's in a conversation,
> I ignore the second (the fake) address in the conversation.
> 

<snip>
> 

> The string I put in the data part of the conversation was necessary to
> differentiate between two protocols that use conversations in the same
> way, I had to search long before I found this to be the solution.
> 
> --
> Andreas Sikkema
> andreas.sikkema@xxxxxxxxxxx
> "Standing barefoot in a river of clues, most people would
>          not get their toes wet." - Brian Kantor in a.s.r.

<snip>


Hi Andreas,

Thanks for the info, I shall give the heuristic/conversation
approach a go and see what happens :-)

Cheers / Frank..

-- 
EUS/SV/Z Frank Singleton      ASO Americas BSS
Office : +1 972 583 3251      ECN 800 33251  
Pager  : +1 800 651 1184      Email : eusfrsi@xxxxxxxxxxxxxxx 
Amateur Radio: VK3FCS/KM5WS   Email : frank.singleton@xxxxxxxxxxxx

Hardware: HP Omnibook 4150 running Redhat Linux 6.2 (2.2.16 kernel).