Wireshark · Ethereal-dev: Re: [Ethereal-dev] Modest tapping plugins to watch WAP, HTTP and DHCP traffic

[Guy Harris <guy@xxxxxxxxxxxx>]

On Tuesday, September 2, 2003, at 6:12 AM, jean-michel.fayard wrote:

> this is a following of my previous mail. I separate it, because
> this set of patches is very independant of the previous one.

I checked in one of the versions of those patches you sent out; you 
should probably check to make sure it's the right one, if the patches 
were different in the different mail messages.

I also made some changes:

	1) I just exported the value_string tables from packet-wsp.c, rather 
than exporting routines to return pointers to them;

	2) the HTTP dissector now refers to the HTTP response code as a 
response code rather than a response method.

> This tap mechanism is great : they are simple to write, and
> the windows update them in real time (If not, my patch would
> have no interest), and if some tapping plugin doesn't interest
> you, it doesn't hurt you (no more memory, no GUI bloat,...)

They're not really plugins, although we should eventually support 
plugin taps as well as compiled-in taps.

> The two bad things I found are
> * $ ethereal -z http,stat,<filter> -z bootp,stat,<filter>
>      currently only start the last window (bootp).
>      It is a bug in my programs or in the mechanism itself ?

It's probably a bug in the mechanism itself.

> * There is a lot of duplication between the code for
>      ethereal, and the code for tethereal.

Yes.  It'd be nice if there were a way to have a tap compute the 
statistics and show them as, for example, a table, and have common code 
in Ethereal and Tethereal display the table.