| From: Ian Schorr | Subject: Re: [Ethereal-dev] Feature request - Follow UDP Stream | | Best guess? | | I'd assume that under most cases, the topmost layer | information (or the | topmost layer that contains a "follow xx conversation" | option) would be | the most "likely" set of information that the user would want | to use to | identify a conversation. This obviously won't be correct 100% of the | time, therefore it would make sense to also allow a "Follow | conversation" option when selecting an individual protocol | line within | the decoded packet in the middle pane. | | Ian
This is precisely what I want :) Sometimes a frame pertains to more than one conversation, and sometimes the conversation code bundles transport (e.g., when using NO_PORT_2), and this may or may not be the required level of granularity for a given investigation. Perhaps it makes sense to give the user some more information on the type of conversation (like NO_PORT_2 etc), so s/he knows what is to be expected. Regards, Olivier
