Ethereal-dev: SV: [Ethereal-dev] Updates to NCP Dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Anders Broman" <a.broman@xxxxxxxxx>
Date: Thu, 2 Mar 2006 21:53:37 +0100
Hi,
I have problems to apply the first patch(haven't tried the others).
Brg
Anders

-----Ursprungligt meddelande-----
Från: ethereal-dev-bounces@xxxxxxxxxxxx
[mailto:ethereal-dev-bounces@xxxxxxxxxxxx] För Greg Morris
Skickat: den 1 mars 2006 17:48
Till: ethereal-dev@xxxxxxxxxxxx
Ämne: [Ethereal-dev] Updates to NCP Dissector

Changes to packet-ncp.c
1. Server broadcast message flag. Now indicates if the message is a pending
message or an oplock clear notification.
2. Cleanup of packet signature detection process. Previous method had some
flaws so I redesigned it. Appears to be solid now.
3. Echo NCP Server Session information to expert tap.
 
Note on item #3: NCP Connection+Task = NCP Session, a Single connection can
have many tasks. The server sees each connection/task as a unique session.
For this reason the NCP session information is now echoed to the expert
composite statistics so that you can easily identify the different NCP
processes and sessions. It is important to NCP analysis to understand that
each session is most likely a different program on the requesting host
sharing the same NCP connection.
 
Changes to packet-ncp2222.inc
1. Comment out the echo of NCP connection info to expert tap. Replaced by
NCP sessions.
 
Changes to ncp2222.py
1. Fix for endian display of bindery object type in NCP 0x1720.
2. Fix for size of bindery object type to 2 bytes instead of 4 to match
other bindery NCP's.
 
Please apply,
 
Greg