Ethereal-dev: [Ethereal-dev] TCP sequence analysis - convert to a tap ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "J.Smith" <lbalbalba@xxxxxxxxxxx>
Date: Sat, 19 Apr 2003 15:20:23 +0200
Hi.

I seem to remember that a while back, there was some talk on this list about
the TCP stream analysis code, and the fact that it does its parsing of the
link layer and the network layer itself, causing the TCP graphing code to be
link-layer dependent in that it can only handle ethernet as the link layer.

There also was some discussing about the possibility of recoding the part of
TCP stream analysis that extracts the TCP header to use a TAP instead
(effectively converting it to a tap) and thus make it link layer agnostic.

I was wondering if this is still the case, or if anyone on this list has had
enough time to both study the code and implement such changes ?




Sincerely,

John Smith