On Sat, Jan 12, 2002 at 11:02:55AM +1100, Ronnie Sahlberg wrote: > attached is a new patch for nfs name snooping, it fixes the bug where the > '/' > separating path components were sometimes missing.
Checked in (with fixes to the preference names). Does this include all the previous name snooping patches you've sent? > it also adds a simple 32 bit xor hash value for every fh. > using this hash makes it 'easier' to filter for specific fhandles. Sun's snoop generates a 16-bit hash; unfortunately, from personal experience, I can testify that their hashing mechanism is not good enough to avoid collisions in real life captures, which is a nuisance. They use the 16-bit hash in summary lines; we might want to think about having ONC RPC protocols put more into the summary line than just the version numbe, procedure name, call/reply indicator, and XID (i.e., have subdissectors put some of the arguments and reply parameters into the summary).
