Ethereal-dev: Re: [ethereal-dev] resolutionf

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: guy@xxxxxxxxxx (Guy Harris)
Date: Thu, 15 Oct 1998 14:20:33 -0700 (PDT)
> - ethers resolution should be really fast and even faster than host/service
>   resolution since all packets contain those addresses while IP/ports are
>   not present in all packets

On some networks, the difference between the number of packets that
contain MAC addresses and the number of packets that contain IP
addresses is not very large, so that particular argument applies only
weakly, at best, on those networks.

The other points are reasonable.