Wireshark · Ethereal-dev: Re: [Ethereal-dev] Feature request - Follow UDP Stream

[Ian Schorr <spamcontrol2@xxxxxxxxxxx>]

Best guess?

I'd assume that under most cases, the topmost layer information (or the 
topmost layer that contains a "follow xx conversation" option) would be 
the most "likely" set of information that the user would want to use to 
identify a conversation.  This obviously won't be correct 100% of the 
time, therefore it would make sense to also allow a "Follow 
conversation" option when selecting an individual protocol line within 
the decoded packet in the middle pane.

Ian

On Oct 13, 2003, at 4:56 PM, Guy Harris wrote:

> On Oct 13, 2003, at 1:36 PM, Kevin wrote:
>
> > If this is done by right clicking over the frame selected, there 
> > would be no reason for the user to select the protocol.
>
> The frame selected doesn't specify, by itself, which conversation 
> layer is of interest - if you right-click in the topmost pane, and ask 
> to follow a conversation, how can it infer whether you want all 
> packets between those link-layer hosts, all packets between those IP 
> hosts, or all packets between those {TCP,UDP,SCTP} endpoints?
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev