[Richard Urwin <richard@xxxxxxxxxxxxxxx>]

On Friday 19 Nov 2004 12:03 pm, LEGO wrote:
> Let's do an example using DNS:

Thanks for this example. It does look very interesting; I'll keep my eye 
on it.

> [snip]
> # this tells mate that a dns leg starts when the attribute dns_rsp is
> 0; Action=LegStart; On=dns; dns_rsp=0;
>
> # this tells mate that a dns leg stops when the attribute dns_rsp is
> 1; Action=LegStop; On=dns; dns_rsp=1;

Is it a good idea to have an explicit start and stop? Howabout if the 
ethereal machine, for some unknown routing reason, is receiving packets 
out of order? Admittedly a slim possibility, seeing that the two 
machines probably have to be receiving them in the right order, but 
with complex PDUs it could happen.

-- 
Richard Urwin