Wireshark · Ethereal-dev: [ethereal-dev] Large lookup tables...

["Neulinger, Nathan R." <nneul@xxxxxxx>]

I started adding a bunch of the unknown IPX SAP types that I saw on my local
network, and came across some lists that helped the process considerably.

http://www.inpnet.org/cnpweb/saplist.txt    -  really big

http://www.isi.edu/in-notes/iana/assignments/novell-sap-numbers

One thing that came up though as I was adding some of them is that lists
like this can be REALLY large, and it's going to start to get very
inefficient to look them up. (In my case, I'm not adding all that many, but
it seems like it might be worthwhile to start adding alot more to some of
these tables.)

I was thinking it might make sense to start using gperf for some of these
structures for efficiency. In fact, to clean up the source files, I was
thinking it might be good to add a directory to the ethereal dist, and put
the tables into that dir in a more textual form (for easier maintenance)
which could then be compiled (developer side only - not when a user
downloads it) into gperf hashes. 

Any thoughts?

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216