Richard Sharpe wrote:
On Mon, 8 Dec 2003, Guy Harris wrote:
On Mon, Dec 08, 2003 at 10:31:38AM +0100, Ulf Lamping wrote:
Could someone explain to me, what the "File->Save Highlighted" menu
item is useful for? Please keep in mind, that this menu item is somewhat
very uncommon, and even worse, I don't have a clue, what it will really
do!
I'll let Richard Sharpe explain when it's useful.
It's useful for those cases where you are trying to understand portions of
a packet or writing tools etc for other projects.
There are many places where blobs are included in packets, and this
feature allows you to extract a whole piece of a protocol to a file and
run other tools over it.
The idea was suggested by Andrew Tridgell who wanted to be able to extract
the NDR for DCE-RPC so he could run the tools he is developing in Samba
over a bunch of NDR to see if he handles it correctly.
Since we have vague hopes of actually generating Ethereal dissectors from
the NDR as well, this will form a useful facility for incrementally
handling new RPC interfaces.
Regards
-----
Richard Sharpe, rsharpe[at]ns.aus.com, rsharpe[at]samba.org,
sharpe[at]ethereal.com, http://www.richardsharpe.com
Well, I had a different thing in mind, when looking at this menuitem,
but Guy had explained this already quite well.
And I agree that this feature *is* useful in some cases, maybe not even
the one you'd described.