Wireshark mailing list archives
Global conversation
From: Anders Broman <anders.broman () ericsson com>
Date: Fri, 7 Oct 2011 14:51:35 +0200
Thus wrote Guy Harris (guy () alum mit edu):We should probably also add a notion of "conversations" available to dissectors at multiple layers (a notion more general than the current address-and-port-endpoint-pair notion, that can include multiple address layers, "circuits" for protocols that have a virtual circuit ID of some sort, and conversations at layers above the transport layer)that would definitely be helpful. As far as I can see, DVB-CI is an example that does not fit into the current mechanism very well. CI is not based on tcp/ip, a ci session looks like open_session_request(resource_id) session_opened(newly assigned session number) payload transfer(session_number, payload data) ... close session(session_number) For now, how would you create a conversation from this? I've been playing with a new port_type PT_DVBCI_SESSION_NUMBERand set both source and destination port to the session number. Does that make sense or is there a better approach?Thanks, Martin
I've been contemplating the idea of making it possible to filter a "call" in the Telco world that could involve A multitude of protocols for example SIP, DIAMETER, H248, ISUP, BICC and a number of Mobile protocols. I suppose this is What mate tries to do. Perhaps it could be done if we had a Global conversation to which you cold add a List of per protocol conversations. One problem is to make it generic enough and in this particular scenario the subscriber number or similar would be the thing gluing the conversations together and that would only be Available in some messages. Another problem is when to create the global conversation e.g. what is the start. Thoughts? Regards Anders ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Send info to plugin fab12 (Oct 07)
- Re: Send info to plugin Anders Broman (Oct 07)
- Re: Send info to plugin Guy Harris (Oct 07)
- Re: Send info to plugin fab12 (Oct 07)
- Re: Send info to plugin Guy Harris (Oct 08)
- Re: Send info to plugin Martin Kaiser (Oct 07)
- Global conversation Anders Broman (Oct 07)
- Re: Global conversation Stephen Fisher (Oct 07)
- Re: Global conversation Mike Morrin (Oct 07)
- Re: Global conversation Anders Broman (Oct 07)
- Re: Global conversation Anders Broman (Oct 07)
- Re: Global conversation Neil Piercy (Oct 10)
- Re: Send info to plugin fab12 (Oct 07)
- Re: Global conversation Guy Harris (Oct 08)
- Re: Send info to plugin Guy Harris (Oct 08)