Ethereal-dev: Re: [Ethereal-dev] Re: packet-nfs.c

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 13 Aug 2001 01:45:56 -0700
On Sun, Aug 12, 2001 at 11:14:04PM -0400, Mike Frisch wrote:
> Another small feature I wanted to implement was to hash the filehandle
> into a 32-bit value for ease of "processing" just like Solaris' snoop
> does.

(Actually, as I remember, it hashes it into a 16-bit value.  Perhaps
newer version has into a 32-bit value.)

Of course, snoop puts the full file handle into the "-v" output; it uses
the hashed value in non-"-v" output.

The Ethereal equivalent would be to put it into the COL_INFO column, but
the subdissectors of the ONC RPC dissector don't currently fill that
column in; doing so might be a good idea (putting it after the XID, say).

> This also makes it easier for tracing the use of filehandles,
> instead of having to compare long filehandles, a 32-bit value can be
> used.

...although I remember having seen, in at least one capture, two file
handles hashing to the same 16-bit value, so a 16-bit value wouldn't be
sufficient - a 32-bit value *might* suffice, but the full file handle
should still be put into the protocol tree.