Hi list.
I thought of adding a small feature to ethereal, thoug it would impact
performance...
I am not sure if it would be desired since it would degrade erformance.
Comments please.
I was thinking something along the line of adding code to packet-nfs.c to
scan for
special packets where one can determine the mapping between filehandles and
filenames,
say LOOKUP and similar packets.
The code could then build a dynamic linked list holding all these mappings.
When later dissecting other NFS or related packets (NLM) which only contain
an NFS
filehandle, one could add code which would print the filename that handle
corresponds to.
This would degrade performance since everytime ethereal would need to parse
a filehandle
it would also need to look that filehandle up in the list described above,
and if a match is found it would print the filename.
It would also increase the memory requirement of running ethereal.
I am open for suggestions, would it be worth it?
Should it in that case be implemented as an option, as one can choose to use
DNS resolving
on the trace?
Best Regards
Ronnie Sahlberg