ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8462] Manual name resolution not working

Date: Tue, 10 Sep 2013 16:39:47 +0000

Comment # 5 on bug 8462 from
Yes, but it is not quite so simple, since we want to avoid writing extra names
to the NRB to avoid leaking information. If we just keep name resolution data
for the lifetime of the file (across multiple dissections) then we can end up
with stale data getting written to the NRB.

It seems to me that the correct way to handle all cases is to associated name
resolution data with each frame (in the frame_data perhaps) in addition to the
global hash table. Then base the data in the NRBs according to the what is
linked from each frame being written (as opposed to just writing everything in
the hash table).

So the frame_data resolutions are cleared on each dissection, but the hash
table is never cleared. Then when manual resolution occurs, it gets added to
the hash table, the packet is redissected, and the frame_data name list is
rebuilt from scratch with only the new information.


You are receiving this mail because:
  • You are watching all bug changes.