Ethereal-dev: Re: [Ethereal-dev] Patch for adding http.x_forwarded_for

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Lars Roland" <Lars.Roland@xxxxxxx>
Date: Sun, 19 Feb 2006 15:50:46 +0100
Am 19.02.2006, 15:02 Uhr, schrieb Sake Blok <sake@xxxxxxxxxx>:


Hi,

This would be my first contribution to ethereal. I'm not sure
whether all dissectors only include things listed in the RFC's.
But in the field I often have to follow http-streams even when
they have passed a proxy or load-balancer. Filtering on client
ip-addresses therefor is not possible anymore. Often the
client-ip-address is listed in the http-header in the following
format: "X-Forwarded-For: 123.123.123.123". Searching on this
string is possible, but it would be great to be able to filter
on it, therefor I patched the "packet-http.c" to include a
http.x_forwarded_for field. Could this patch be included in
the sources?



Personally I don't have anything against adding filter
fields for non standardized http headers, but you should also be
able to use following display filter:
http contains "X-Forwarded-For: 123.123.123.123"
Just tell us, if you like to see your patch applied anyway.

Regards,
Lars