Wireshark · Ethereal-dev: Re: [ethereal-dev] packet-http.c

[Guy Harris <guy@xxxxxxxxxx>]

> It is possible to attach information to a conversation,

Yes.  0.8.19 only allows one data item to be attached to a conversation;
the current CVS version allows multiple items, with a protocol ID as a
key, just as you can attach multiple data items to a frame.

Much of this problem can probably be fixed by using the
"Content-Length:" header, and keeping track of how much data has been
seen.  (TCP segment reassembly might not be what you'd want to use here
- it might be overkill - as you wouldn't necessarily want to reassemble
the entire huge picture of Pamela Anderson in memory; you wouldn't even
need that for the feature that's been asked for in the past, namely the
ability to extract to a file the content of an HTTP reply.)

"Content-Type:" might also be worth using, to determine whether to
display the content as text.