Wireshark · Ethereal-dev: [Ethereal-dev] wishlist: hash of packet-data

["Ph. Marek" <philipp.marek@xxxxxxxxxx>]

Hello everybody,

as a step to comparing captures I'd like a simple feature included in 
ethereal: having some kind of hash-value (MD5, SHA-1, possibly CRC-32) for 
the various levels of packet dissection.

Eg. having a hash for the ethernet-packet, for the IP-part, the TCP-part, and 
possibly sub-dissectors.

This would help finding corresponding packets in simultaneously done sniffer 
dumps, and allow checking for corruptions easily (think NAT, where some part 
is legitimately changed, but others below must not).


If no-one objects I'll write that into the wiki page at 
http://wiki.ethereal.com/WishList too.



Regards,

Phil