Wireshark · Ethereal-dev: [Ethereal-dev] Help Conversation

[Guillaume Le Malet <guillaume.le.malet@xxxxxxxx>]

Hi,                                                                   
I've tried to understand how "conversation" in ethereal works,        
and I've got a few questions:                                         
                                                                      
-When we do: "frame_data = p_get_proto_data(pinfo->fd, proto_smtp)"   
 does it point at the same time on all smtp packets that where        
captured?                                                             
                                                                      
-What does CRLF, EOM and Hash Table mean?                             
                                                                      
-Is there a CRLF in any "over TCP proto" messages?                    
                                                                      
THX                                                                   
                                                                      
Guillaume.