On Sun, Aug 12, 2001 at 11:14:04PM -0400, Mike Frisch wrote:
> Another small feature I wanted to implement was to hash the filehandle
> into a 32-bit value for ease of "processing" just like Solaris' snoop
> does.
(Actually, as I remember, it hashes it into a 16-bit value. Perhaps
newer version has into a 32-bit value.)
Of course, snoop puts the full file handle into the "-v" output; it uses
the hashed value in non-"-v" output.
The Ethereal equivalent would be to put it into the COL_INFO column, but
the subdissectors of the ONC RPC dissector don't currently fill that
column in; doing so might be a good idea (putting it after the XID, say).
> This also makes it easier for tracing the use of filehandles,
> instead of having to compare long filehandles, a 32-bit value can be
> used.
...although I remember having seen, in at least one capture, two file
handles hashing to the same 16-bit value, so a 16-bit value wouldn't be
sufficient - a 32-bit value *might* suffice, but the full file handle
should still be put into the protocol tree.