Am I being overly simplistic here, or could we add information to the per-packet structure indicating the appropriate hash entry in the conversation hash? Then the right click menu handler could have access to that information. Or am I missing something fundamental?

--john

Ian Schorr wrote:
I love the conversation list feature. However, when I'm analyzing a trace and deciding that I want to concentrate on a particular "conversation" based on something I'm seeing while examining the packet view, I shouldn't have to bring up the conversation list (and reprocess the entire trace), find the conversation that I want a second time, and THEN filter down. Conversation list is for a different mental "mode" of analysis.

I often find it useful to select "Follow TCP stream" from the packet list,
In ethereal,  Tools/Statistics/Conversation List/UDP
click a conversation and select to filter using the popup menu


--
John McDermott
Writer, Educator, Consultant
[EMAIL PROTECTED]               http://www.jkintl.com
V +1 505/377-6293 F +1 505/377-6313



Reply via email to