Ethereal-dev: [Ethereal-dev] Adding options to conversations in Ethereal during run time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Richard Sharpe <rsharpe@xxxxxxxxxxxxxxxxx>
Date: Thu, 9 Jan 2003 11:00:32 -0800 (PST)
Hi,

When you are capturing SMB traces with MSRPC stuff in it, if you miss the 
first few packets (like the BIND, or earlier), you don't get the 
conversation decoded correctly. For example, it shows up as DCERPC and not 
as SPOOLSS.

It would be useful if you could click on a packet, and add information to 
the conversation. It would be useful if you could set the RPC type for 
example, or specify the password for SMB stuff as I mentioned.

This is going to require more infrastructure, but could be interesting.

Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org, 
sharpe[at]ethereal.com, http://www.richardsharpe.com