Ethereal-dev: Re: [ethereal-dev] Re: resolving implemented AND: new patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Laurent Deniel <deniel@xxxxxxxxxxx>
Date: Sun, 06 Sep 1998 18:52:45 +0200
Hannes R. Boehm wrote:
> 
> On Sun, Sep 06, 1998 at 02:46:37PM +0200, Laurent Deniel wrote:
> > Hi,
> >
> >  I have implemented network object name resolving.  The current
> >  implemented objects are : IP addresses, UDP and TCP ports.
> >
> >  All name resolutions use a hash table to optimize lookup time
> >  and a mechanism is implemented to avoid long DNS timeout for
> >  hostname lookups.
> 
> Do you know the NAI Sniffer ?
> 
> It does take the RR form DNS packets it has already analyzed instead of
> making a lookup itself. This way there is no traffic generated by the sniffer.
> (even if not all IPs show up in the DNS packets it is quite usefull)
> 

Yes but as ethereal analyses dump files, the generated traffic is not 
important (there is no lookup during the capture phase). And I prefer 
to make real lookup since the captured packets may have been filtered 
(i.e. no DNS packets in the file).

Laurent.

--
Laurent DENIEL            | E-mail: deniel@xxxxxxxxxxx
Paris, FRANCE             |         deniel@xxxxxxxxxxxxxxxxxxxxxxxxxxxx
                          | WWW   : http://www.worldnet.fr/~deniel
    All above opinions are personal, unless stated otherwise.