Wireshark mailing list archives

Re: Stateless Dissection


From: Evan Huus <eapache () gmail com>
Date: Sun, 22 Jun 2014 17:45:45 -0400

On Sun, Jun 22, 2014 at 5:25 PM, Jakub Zawadzki <darkjames-ws () darkjames pl>
wrote:

Hi Evan,

On Sun, Jun 22, 2014 at 05:07:19PM -0400, Evan Huus wrote:
The implementation is a bit of a hack in that stateless dissection still
does all the stateful work, it just throws it away after each packet (so
stateless is actually slightly slower than stateful) but it seems to work
in my simple tests.

Does this seem useful to people? Ideas for a better flag (Z just happened
to be handy)? Other thoughts, comments, suggestions?

Great, but I'd like to see also something working for *given* frame number,
this would also fix issues with -R (like remove all conversations,
reassemblies created by *given* frame number).


I don't think I understand?


About flag, I'd suggest -0 (zero-pass) ;-)


I quite like that actually :)

Cheers,
Jakub
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: