Wireshark · Wireshark-dev: Re: [Wireshark-dev] Stateless Dissection

[Evan Huus <eapache@xxxxxxxxx>]

On Sun, Jun 22, 2014 at 5:25 PM, Jakub Zawadzki <darkjames-ws@xxxxxxxxxxxx> wrote:

Hi Evan,

On Sun, Jun 22, 2014 at 05:07:19PM -0400, Evan Huus wrote:
> The implementation is a bit of a hack in that stateless dissection still
> does all the stateful work, it just throws it away after each packet (so
> stateless is actually slightly slower than stateful) but it seems to work
> in my simple tests.
>
> Does this seem useful to people? Ideas for a better flag (Z just happened
> to be handy)? Other thoughts, comments, suggestions?

Great, but I'd like to see also something working for *given* frame number,
this would also fix issues with -R (like remove all conversations,
reassemblies created by *given* frame number).

I don't think I understand?

 

About flag, I'd suggest -0 (zero-pass) ;-)

 

I quite like that actually :)

Cheers,
Jakub
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe