Ethereal-dev: Re: [ethereal-dev] An idea

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Mon, 14 Feb 2000 10:05:45 -0800
> > Or say "in this capture, UDP port XXX is for protocol YYY", or something
> > such as that?
> 
> Well, something like that. f.i.:
> 
> Frame 		Type		From		To
> 1.		http		2010		80
> 2.		ftp		3030		5434
> 3.		tcp		1010		2020
> 5.		http		3030		80
> 
> And that you can say "treat frame 3 as if it were a http message" or
> some other type.

What if you have

Frame 		Type		From		To
1.		http		2010		80
2.		ftp		3030		5434
3.		tcp		1010		2020
4.		tcp		2020		1010
5.		http		3030		80
6.		tcp		1010		2020
7.		tcp		1010		2020

Presumably, in that case, frames 3, 4, 6, and 7 would all probably be
HTTP, so you might want to flag the entire connection between machine A
port 1010 and machine B port 2020 as HTTP - preferably in one operation,
not 4 (or more).