["Pia Sahlberg" <piabar@xxxxxxxxxxx>]

Hi list
comments please,

attached is a new patch for the name snooping API.
See files name-snooping.[ch]

As an example on how to use this feature the following changes are made to 
packet-nfs.c :
All v2/v3 LOOKUP,CREATE and MKDIR packets are snooped to build the mapping 
between nfs filenames and filehandles.
Whenever a NFS filehandle is printed in the tree pane the corresponding
filename (if known) will also be displayed.

Please check this in into CVS.
It seems to work quite well, it has been tested for v2/v3 with the captures 
on the website as well as on a few v3 captures containing ~100.000 packets 
each on my laptop.

To enable this feature, click EDIT/PREFERENCES/NFS/snooping button
Without this feature NFS dissection works as it always did before.


Other potential uses for the name-snooping api might be:
* Hostnames: resolve names by lokking at DNS/NetBIOS packets in the capture.
* SMB: FID
* etc etc


best regards
  ronnie sahlberg


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Attachment: nfs_snoop.tgz
Description: application/gzip-compressed