Ethereal-dev: Re: [Ethereal-dev] TCP sequence analysis - convert to a tap ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 19 Apr 2003 14:44:57 -0700
On Sat, Apr 19, 2003 at 03:20:23PM +0200, J.Smith wrote:
> I seem to remember that a while back, there was some talk on this list about
> the TCP stream analysis code, and the fact that it does its parsing of the
> link layer and the network layer itself, causing the TCP graphing code to be
> link-layer dependent in that it can only handle ethernet as the link layer.

I think it also handles PPP, but that's it.

> There also was some discussing about the possibility of recoding the part of
> TCP stream analysis that extracts the TCP header to use a TAP instead
> (effectively converting it to a tap) and thus make it link layer agnostic.
> 
> I was wondering if this is still the case,

It is still the case; either nobody's had the time to convert it to use
a tap, or somebody has but hasn't contributed it.