Wireshark-dev: Re: [Wireshark-dev] Stateless Dissection
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx>
Date: Sun, 22 Jun 2014 23:25:37 +0200
Hi Evan,

On Sun, Jun 22, 2014 at 05:07:19PM -0400, Evan Huus wrote:
> The implementation is a bit of a hack in that stateless dissection still
> does all the stateful work, it just throws it away after each packet (so
> stateless is actually slightly slower than stateful) but it seems to work
> in my simple tests.
> 
> Does this seem useful to people? Ideas for a better flag (Z just happened
> to be handy)? Other thoughts, comments, suggestions?

Great, but I'd like to see also something working for *given* frame number,
this would also fix issues with -R (like remove all conversations,
reassemblies created by *given* frame number).

About flag, I'd suggest -0 (zero-pass) ;-)

Cheers,
Jakub