Ethereal-dev: RE: [ethereal-dev] suggested feature...
Actually, no, I really meant to just have it ignore a protocol.
The filtering is simple - just type in one of the fields, i.e. "tcp" will
only show packets within the tcp protocol.
-- Nathan
------------------------------------------------------------
Nathan Neulinger EMail: nneul@xxxxxxx
University of Missouri - Rolla Phone: (573) 341-4841
Computing Services Fax: (573) 341-4216
> -----Original Message-----
> From: Jeff Foster [mailto:jfoste@xxxxxxxxxxxx]
> Sent: Tuesday, October 19, 1999 9:06 AM
> To: 'Gilbert Ramirez'
> Cc: 'Guy Harris'; Neulinger, Nathan R.; 'ethereal-dev@xxxxxxxx'
> Subject: RE: [ethereal-dev] suggested feature...
>
>
>
> Well... the old sniffer would just show the selected protocol
> in the summary
> (top) window and do a decode of all protocol levels in the
> details (middle)
> window. SnifferPro does a decode on all protcols in the
> summary window even
> if they aren't selected, ie. selecting UDP will show the NFS decodes.
>
> I did select UDP and found this interesting twist, we have
> NFS traffic and
> the SnifferPro shows the IP continuation packets even though
> they aren't
> really UDP packet. I think that would be really ugly to impliment.
>
> I do use this function on our sniffers and think that the
> original request
> is for a filter that would allow you to limit the display packets to a
> certain protocol. Correct me if I'm wrong, this is how I use it.
>
> Jeff Foster
> jfoste@xxxxxxxxxxxx
>
>
>
> > -----Original Message-----
> > From: Gilbert Ramirez [SMTP:gram@xxxxxxxxxx]
> > Sent: Tuesday, October 19, 1999 8:30 AM
> > To: Jeff Foster
> > Cc: 'Guy Harris'; Neulinger, Nathan R.; 'ethereal-dev@xxxxxxxx'
> > Subject: Re: [ethereal-dev] suggested feature...
> >
> > On Tue, Oct 19, 1999 at 07:37:14AM -0500, Jeff Foster wrote:
> > >
> > > I use sniffers and I can tell you that it doesn't show
> the protocols
> > that
> > > aren't selected. I like this feature and would like to see it
> > implimented.
> >
> > But what does it do when a particular protocol is not
> selected... does
> > it show the rest of the packet as data (is if the
> unselected protocols
> > were
> > sent through dissect_data() ), or does it just stop processing the
> > protocol
> > in the middle?
> >
> > --gilbert
>
