Wireshark-dev: Re: [Wireshark-dev] Improving TCAP session matching
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 3 Jan 2015 16:49:06 -0800
On Jan 3, 2015, at 4:32 PM, Luke Mewburn <luke@xxxxxxxxxxx> wrote:

> I suspect we need special-case handling in find_conversation() (etc)
> for PT_TCAP, including possibly a separate hashtable or keeping
> the TCAP BEGIN in the conversation_hashtable_no_addr2_or_port2 in
> parallel to the entry in conversation_hashtable_exact.

I suspect what we need is to separate the general concept of conversations from the details of particular protocols, so that each type of conversation would supply its own matching code.