Wireshark mailing list archives

Re: Improving TCAP session matching


From: Luke Mewburn <luke () mewburn net>
Date: Sun, 4 Jan 2015 13:11:20 +1100

On Sat, Jan 03, 2015 at 04:49:06PM -0800, Guy Harris wrote:
  | 
  | On Jan 3, 2015, at 4:32 PM, Luke Mewburn <luke () mewburn net> wrote:
  | 
  | > I suspect we need special-case handling in find_conversation() (etc)
  | > for PT_TCAP, including possibly a separate hashtable or keeping
  | > the TCAP BEGIN in the conversation_hashtable_no_addr2_or_port2 in
  | > parallel to the entry in conversation_hashtable_exact.
  | 
  | I suspect what we need is to separate the general concept of
  | conversations from the details of particular protocols, so that each
  | type of conversation would supply its own matching code.

That sounds better. That could replace the existing special
cases for PT_UDP and AT_FC too.

Attachment: _bin
Description:

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: