Wireshark mailing list archives
Re: Improving TCAP session matching
From: Guy Harris <guy () alum mit edu>
Date: Sat, 3 Jan 2015 16:49:06 -0800
On Jan 3, 2015, at 4:32 PM, Luke Mewburn <luke () mewburn net> wrote:
I suspect we need special-case handling in find_conversation() (etc) for PT_TCAP, including possibly a separate hashtable or keeping the TCAP BEGIN in the conversation_hashtable_no_addr2_or_port2 in parallel to the entry in conversation_hashtable_exact.
I suspect what we need is to separate the general concept of conversations from the details of particular protocols, so that each type of conversation would supply its own matching code. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Improving TCAP session matching Luke Mewburn (Jan 03)
- Re: Improving TCAP session matching Guy Harris (Jan 03)
- Re: Improving TCAP session matching Luke Mewburn (Jan 03)
- Re: Improving TCAP session matching Alexis La Goutte (Jan 04)
- Re: Improving TCAP session matching Alexis La Goutte (Jan 05)
- Re: Improving TCAP session matching Luke Mewburn (Jan 09)
- Re: Improving TCAP session matching Jeff Morriss (Jan 07)
- Re: Improving TCAP session matching Guy Harris (Jan 03)