Ethereal-dev: Re: [Ethereal-dev] wishlist: hash of packet-data

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Mon, 25 Jul 2005 19:49:04 +0200
Ph. Marek wrote:

Hello everybody,

as a step to comparing captures I'd like a simple feature included in ethereal: having some kind of hash-value (MD5, SHA-1, possibly CRC-32) for the various levels of packet dissection.

Eg. having a hash for the ethernet-packet, for the IP-part, the TCP-part, and possibly sub-dissectors.

This would help finding corresponding packets in simultaneously done sniffer dumps, and allow checking for corruptions easily (think NAT, where some part is legitimately changed, but others below must not).


If no-one objects I'll write that into the wiki page at http://wiki.ethereal.com/WishList too.

Sounds like a good idea to me...

As this will decrease performance, it should be made available by a preference setting where the default is off IMHO.

Regards, ULFL