I was looking to see if anyone knew if it was possible to get the time delta for specific sequence numbers. Simular to the dcerpc.time for dce/dfs.
If not is it easy to implement?
It should be relatively easy to implement.
step 1: Start with looking in packet-afs.c there is a struct that is kept between requests and replies that currently only contain one field: opcode. Extend this struct to also hold a request frame ns_time value as well as two gint32's holding request frame and reply frame number. (use -1 value for request/reply not seen yet) (compare with packet-rpc.c) Add hf_ entries for request_in and reply_in and time_from_request
Put code in the dissector to place these values in the decode pane: in the request packet: reply_in in the reply packet : request_in and time_from_request
when this works ok: step 2: add TAPping functionality to AFS. As the tap specific data, return the pointer to the struct specified above.
step 3: start with tap-smbstat.c and modify to use the afs tap. maybe also modify some value_string structs in packet-afs.c to be non-static and visible from the tap-afsstat.c This should not be too difficult.
step 4:
update tethereal.pod.template so that the manpage knows about your tap application.
step 5: start with gtk-smb-stat.c/h and modify to use the afs tap. should take very similar changes as already done to the tap-afsstat.c
step 6: update ethereal.pod.template
step 7: announce on ethereal-dev
good luck ronnie sahlberg
_________________________________________________________________
Add photos to your e-mail with MSN 8. Get 2 months FREE*. http://join.msn.com/?page=features/featuredemail
