Re: Improving TCAP session matching

[Guy Harris <guy () alum mit edu>]

On Jan 3, 2015, at 4:32 PM, Luke Mewburn <luke () mewburn net> wrote:

> I suspect we need special-case handling in find_conversation() (etc)
> for PT_TCAP, including possibly a separate hashtable or keeping
> the TCAP BEGIN in the conversation_hashtable_no_addr2_or_port2 in
> parallel to the entry in conversation_hashtable_exact.

I suspect what we need is to separate the general concept of conversations from the details of particular protocols, so 
that each type of conversation would supply its own matching code.

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe