Wireshark mailing list archives
Re: Improving TCAP session matching
From: Luke Mewburn <luke () mewburn net>
Date: Sun, 4 Jan 2015 13:11:20 +1100
On Sat, Jan 03, 2015 at 04:49:06PM -0800, Guy Harris wrote: | | On Jan 3, 2015, at 4:32 PM, Luke Mewburn <luke () mewburn net> wrote: | | > I suspect we need special-case handling in find_conversation() (etc) | > for PT_TCAP, including possibly a separate hashtable or keeping | > the TCAP BEGIN in the conversation_hashtable_no_addr2_or_port2 in | > parallel to the entry in conversation_hashtable_exact. | | I suspect what we need is to separate the general concept of | conversations from the details of particular protocols, so that each | type of conversation would supply its own matching code. That sounds better. That could replace the existing special cases for PT_UDP and AT_FC too.
Attachment:
_bin
Description:
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Improving TCAP session matching Luke Mewburn (Jan 03)
- Re: Improving TCAP session matching Guy Harris (Jan 03)
- Re: Improving TCAP session matching Luke Mewburn (Jan 03)
- Re: Improving TCAP session matching Alexis La Goutte (Jan 04)
- Re: Improving TCAP session matching Alexis La Goutte (Jan 05)
- Re: Improving TCAP session matching Luke Mewburn (Jan 09)
- Re: Improving TCAP session matching Jeff Morriss (Jan 07)
- Re: Improving TCAP session matching Guy Harris (Jan 03)