Wireshark mailing list archives
Re: Global conversation
From: Anders Broman <a.broman () bredband net>
Date: Fri, 07 Oct 2011 18:10:55 +0200
Mike Morrin skrev 2011-10-07 17:48:
-----Original Message----- From: wireshark-dev-bounces () wireshark org [mailto:wireshark-dev-bounces () wireshark org] On Behalf Of Stephen Fisher Sent: 07 October 2011 16:32 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] Global conversation On Fri, Oct 07, 2011 at 02:51:35PM +0200, Anders Broman wrote:Perhaps it could be done if we had a Global conversation to which you cold add a List of per protocol conversations.We could create a new set of conversation functions, such as: global_conversation_new() global_find_conversation() global_conversation_add_proto_data() (Although using "global" makes them a bit long)One problem is to make it generic enough and in this particular scenario the subscriber number or similar would be the thing gluing the conversations together and that would only be Available in some messages. Another problem is when to create the global conversation e.g. what is the start.<Using a unique piece of information, such as the phone number, would <allow each dissector that is capable of working with that global <Conversation to look up if it has already been created. Perhaps two <pieces of informatino would be needed: a type of information and the <information, e.g. PHONE_NUMBER and "+11111111111" or something more <generic like passing a string "phone-number" and then the number itself. <It sounds like a good idea, but would just need a few decisions to be <made first. I think that it should be a bit more flexible: * Have conversations per protocol, with 1 or more identifier keys. * When a new identifier is observed, if it can be associated with an existing conversation which was created with a different key, then add the new key to the existing conversation, otherwise create a new conversation with the new key. * Allow conversations to be associated with conversations in other protocols. The set of associated conversations becomes the global conversation, but is flexible in terms of the sequence of build-up of supporting protocols. * A dissector can use a protocol/key pair to find a potentially associated conversion already existing in another protocol. * A dissector can access the set of keys for any protocol in an associated conversation
Something like that is what I was thinking about. /Anders
This message contains confidential information and may be privileged. If you are not the intended recipient, please notify the sender and delete the message immediately. ip.access Ltd, registration number 3400157, Building 2020, Cambourne Business Park, Cambourne, Cambridge CB23 6DW, United Kingdom ___________________________________________________________________________ Sent via: Wireshark-dev mailing list<wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Send info to plugin fab12 (Oct 07)
- Re: Send info to plugin Anders Broman (Oct 07)
- Re: Send info to plugin Guy Harris (Oct 07)
- Re: Send info to plugin fab12 (Oct 07)
- Re: Send info to plugin Guy Harris (Oct 08)
- Re: Send info to plugin Martin Kaiser (Oct 07)
- Global conversation Anders Broman (Oct 07)
- Re: Global conversation Stephen Fisher (Oct 07)
- Re: Global conversation Mike Morrin (Oct 07)
- Re: Global conversation Anders Broman (Oct 07)
- Re: Global conversation Anders Broman (Oct 07)
- Re: Global conversation Neil Piercy (Oct 10)
- Re: Send info to plugin fab12 (Oct 07)
- Re: Global conversation Guy Harris (Oct 08)
- Re: Send info to plugin Guy Harris (Oct 08)