Ethereal-dev: [Ethereal-dev] name-snooping.c name<->object(fhandle) snooping api
Hi list
Attached is a new version of the filename<->fhandle snooping for NFS.
The patch contains two new files
name-snooping.[ch] which provides an API for generic name<->object mappings.
The patch also contains changes to packet-nfs.c which shows how easy
it is to add name snooping to a dissector.
packet-nfs.c use the name-snooping API to create a mapping between
filenames and filehandles by snooping the NFSv3LOOKUP packets.
For any known mapping, packet-nfs.c will now also display the matching
filename for every fhandle structure where this mapping is known.
The API should be fairly generic and can easily be used for example to
snoop DNS packets and create a IPaddr<->Hostname mapping by looking at the
traffic. This can be used (as requested in the wishlist) to allow ethereal
to resolve hostnames by looking at the capture instead of using the
resolver.
please consider for CVS
please comment
best regards
ronnie sahlberg
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp
Attachment:
nfs_snoop.tgz
Description: application/gzip-compressed
