I was looking to see if anyone knew if it was possible
to get the time delta for specific sequence numbers.
Simular to the dcerpc.time for dce/dfs.
If not is it easy to implement?
It should be relatively easy to implement.
step 1:
Start with looking in packet-afs.c there is a struct that is kept
between requests and replies that currently only contain one field:
opcode.
Extend this struct to also hold a request frame ns_time value as well
as two gint32's holding request frame and reply frame number.
(use -1 value for request/reply not seen yet)
(compare with packet-rpc.c)
Add hf_ entries for request_in and reply_in and time_from_request
Put code in the dissector to place these values in the decode pane:
in the request packet: reply_in
in the reply packet : request_in and time_from_request
when this works ok:
step 2:
add TAPping functionality to AFS.
As the tap specific data, return the pointer to the struct specified
above.
step 3:
start with tap-smbstat.c and modify to use the afs tap.
maybe also modify some value_string structs in packet-afs.c to be
non-static and visible from the tap-afsstat.c
This should not be too difficult.
step 4:
update tethereal.pod.template so that the manpage knows about your tap
application.
step 5:
start with gtk-smb-stat.c/h and modify to use the afs tap.
should take very similar changes as already done to the tap-afsstat.c
step 6:
update ethereal.pod.template
step 7:
announce on ethereal-dev
good luck
ronnie sahlberg
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*.
http://join.msn.com/?page=features/featuredemail
