Wireshark · Ethereal-dev: RE: [Ethereal-dev] more options for decode as...

[Biot Olivier <Olivier.Biot@xxxxxxxxxxx>]

Well well well... I'm also thinking in sort-of this direction, but we then
hit the initial definition/intention of conversations, which was intended to
ease protocol dissection without adding much overhead. I think the "session"
principle might come in here: one "conversation" (required for protocol
dissection) is shared by 1 or more "sessions". Should we then provide a
session registration mechanism within conversations, and allow to choose
whether we want all sessions of a given conversation to be decoded as XXX,
or individually select sessions within a conversation to be decoded as YYY?

Comments are welcome!

Regards,

Olivier

> -----Original Message-----
> From: Tomas Kukosa [mailto:tomas.kukosa@xxxxxxxxxxx]
> Sent: woensdag 28 mei 2003 9:10
> To: Lars Ruoff
> Cc: Ethereal-Dev
> Subject: Re: [Ethereal-dev] more options for decode as...
> 
> 
> Lars Ruoff wrote:
> > 
> > but isn't this very limited?
> > Wouldn't it be nicer to have the possibility to assign user 
> decodes to
> > conversations, i.e.
> > "Decode all UDP traffic from IP:port to IP:port as XXX" ?
> > (preferably with a checkbox "Both directions: yes/no")
> > The actual form could be included as a special case with 
> wildcards being
> > used for the IP adresses.
> > 
> 
> Has anybody thought about "unidirectional" conversations?
> Example1:
>  to be able to make two UDP conversations: IP1:port1->IP2:port2 and
> IP2:port2->IP1:port1.
> Example2:
>  to make two UDP conversations: *:*->IP1:port1 and *:*->IP2:port2 and
> than each direction of IP1:port1<->IP2:port2 traffic is passed to
> different conversation.
> 
> How to do it flexible and compatible with current implementation of
> conversations?
> Could it be following?
> 
> /* conversation_new() options */
> #define NO_ADDR2 0x01
> #define NO_PORT2 0x02
> #define UNIDIR_ADDR1_SRC 0x04  /* unidirectional and addr1 is source
> address */
> #define UNIDIR_ADDR1_DST 0x08  /* unidirectional and addr1 is
> destination address */
> 
> /* find_conversation() options */
> #define NO_ADDR_B 0x01
> #define NO_PORT_B 0x02
> #define ADDR_A_SRC 0x04  /* addr_a is source address */
> #define ADDR_A_DST 0x08  /* addr_a is destination address */
> 
>   Regards,
>     Tom
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>