Ethereal-dev: RE: [Ethereal-dev] ip defragment, virtual packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jeff Foster <jfoste@xxxxxxxxxxxx>
Date: Mon, 9 Apr 2001 09:00:49 -0500 
From: Guy Harris [mailto:gharris@xxxxxxxxxxxx]
Sent: Sunday, April 08, 2001 11:08 PM

> On Mon, Apr 09, 2001 at 06:49:12AM +1000, Ronnie Sahlberg wrote:
> > Other potential applications might be
> > IPComp : show uncompressed packets as virtual ones.
> > IPSec : If user has specified encryption keys, show decrypted packet as
> > virtual.
> 
> At least in those two cases, there's an alternative - the stuff Jeff
> Foster added to allow multiple "data sources" for a given packet.

I think that the named data sources would be a cleaner method to 
handle the ip defrag.  You can use the current code to build the
ip data list. Then when all the data is received create a named
view with the defrag'ed data. This way you don't have to create
the virtual packet. And the data storage doesn't have to include
an IP header, just save the actual packet data after the IP
header.

Jeff Foster
jfoste@xxxxxxxxxxxx