Wireshark · Ethereal-dev: Re: [Ethereal-dev] wishlist: hash of packet-data

[Ulf Lamping <ulf.lamping@xxxxxx>]

Ph. Marek wrote:

> Hello everybody,
>
> as a step to comparing captures I'd like a simple feature included in 
> ethereal: having some kind of hash-value (MD5, SHA-1, possibly CRC-32) for 
> the various levels of packet dissection.
>
> Eg. having a hash for the ethernet-packet, for the IP-part, the TCP-part, and 
> possibly sub-dissectors.
>
> This would help finding corresponding packets in simultaneously done sniffer 
> dumps, and allow checking for corruptions easily (think NAT, where some part 
> is legitimately changed, but others below must not).
>
>
> If no-one objects I'll write that into the wiki page at 
> http://wiki.ethereal.com/WishList too.
>
>  
Sounds like a good idea to me...

As this will decrease performance, it should be made available by a 
preference setting where the default is off IMHO.

Regards, ULFL