Ethereal-dev: [ethereal-dev] Per-frame data, conversations, and some neat things one can do

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Sharpe <sharpe@xxxxxxxxxx>
Date: Fri, 15 Sep 2000 06:08:43 +0900
Hi,

I was thinking about the use of per-frame data and associations, and
realized that one can do some interesting things ...

For example, because interesting info is collected in the first pass
through the frames, one could apply that to the tree on subsequent passes.

Eg, with, say an SMTP capture, one could stash the From: and To: address
info in the conversation associated with a stream, and then it could be
added to each frame as a hidden field, and filtered on. This would require
a rescan though.

I will have to write up some stuff on using conversations and per-frame
data together.

Regards
-------
Richard Sharpe, sharpe@xxxxxxxxxx
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)
Contributing author, SAMS Teach Yourself Samba in 24 Hours
Author, Special Edition, Using Samba