Ethereal-dev: Re: [Ethereal-dev] Redesign of the WHOLE Ethereal main menu

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 29 Nov 2003 13:43:55 -0800
On Sat, Nov 29, 2003 at 01:37:05PM -0800, Blue Boar wrote:
> How about being able to go back far enough to dissect the current row? 
> I.e. dissect it, decide that it belongs to the middle of a TCP connection, 
> go back until you get all the packets that belong to that connection (to 
> the SYN) and go forward from there.

Sometimes the state needed to dissect a packet doesn't come from other
packets in the same TCP segment, even if the protocol in question
happens to be running atop TCP (which, as per "Won't work for UDP, I
suppose", isn't necessarily the case).