| From: Ian Schorr
| Subject: Re: [Ethereal-dev] Feature request - Follow UDP Stream
|
| Best guess?
|
| I'd assume that under most cases, the topmost layer
| information (or the
| topmost layer that contains a "follow xx conversation"
| option) would be
| the most "likely" set of information that the user would want
| to use to
| identify a conversation. This obviously won't be correct 100% of the
| time, therefore it would make sense to also allow a "Follow
| conversation" option when selecting an individual protocol
| line within
| the decoded packet in the middle pane.
|
| Ian
This is precisely what I want :) Sometimes a frame pertains to more than one
conversation, and sometimes the conversation code bundles transport (e.g.,
when using NO_PORT_2), and this may or may not be the required level of
granularity for a given investigation. Perhaps it makes sense to give the
user some more information on the type of conversation (like NO_PORT_2 etc),
so s/he knows what is to be expected.
Regards,
Olivier