Ethereal-dev: [Ethereal-dev] packet-nfs.c and name-snooping api

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Pia Sahlberg" <piabar@xxxxxxxxxxx>
Date: Thu, 16 Aug 2001 13:06:30 +0000
Hi list
comments please,

attached is a new patch for the name snooping API.
See files name-snooping.[ch]
As an example on how to use this feature the following changes are made to packet-nfs.c : All v2/v3 LOOKUP,CREATE and MKDIR packets are snooped to build the mapping between nfs filenames and filehandles. 
Whenever a NFS filehandle is printed in the tree pane the corresponding
filename (if known) will also be displayed.

Please check this in into CVS.
It seems to work quite well, it has been tested for v2/v3 with the captures on the website as well as on a few v3 captures containing ~100.000 packets each on my laptop. 

To enable this feature, click EDIT/PREFERENCES/NFS/snooping button
Without this feature NFS dissection works as it always did before.


Other potential uses for the name-snooping api might be:
* Hostnames: resolve names by lokking at DNS/NetBIOS packets in the capture.
* SMB: FID
* etc etc


best regards
  ronnie sahlberg


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Attachment: nfs_snoop.tgz
Description: application/gzip-compressed