Mailing List Archive: Packet comparison

Packet comparison

Jun 7, 2006, 5:33 AM

Post #1 of 3 (1951 views)

Hi,

I would like to be able to compare captured packets on Ethereal. For
example, by right clicking the selected packet, the function to make
comparison with some other packet will be supplied. Comparison might
base on text checking inside different message fields.

How difficult would this be to implement? Any hints on where to start
would be appreciated. Many thanks!

Br,
Kai
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-dev

Re: Packet comparison [ In reply to ]

guy at alum

Jun 7, 2006, 2:15 PM

Post #2 of 3 (1849 views)

Permalink

On Jun 7, 2006, at 5:33 AM, Kai.Kang@nokia.com wrote:

> I would like to be able to compare captured packets on Ethereal. For
> example, by right clicking the selected packet, the function to make
> comparison with some other packet will be supplied. Comparison might
> base on text checking inside different message fields.

Not all fields are text.

What would the result of the comparison be? "Packets are identical"
vs. "packets differ in field X" vs. "packets differ in fields X, and Z"?

How would you specify the two packets to compare?
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-dev

RE: Re: Packet comparison [ In reply to ]

Kai.Kang at nokia

Jun 8, 2006, 6:27 AM

Post #3 of 3 (1843 views)

Permalink

> > I would like to be able to compare captured packets on Ethereal. For

> > example, by right clicking the selected packet, the function to make

> > comparison with some other packet will be supplied. Comparison might

> > base on text checking inside different message fields.

> Not all fields are text.

> What would the result of the comparison be? "Packets are identical"
> vs. "packets differ in field X" vs. "packets differ in fields X, and
Z"?

> How would you specify the two packets to compare?

Sorry for my ambiguity within my question! More concisely my target
material are captured SIP packets, comparison should be carried within
some text fields of them. Like Cseq, Call-ID etc.

The feature I would like to implement can be described as: to choose one
SIP packet from ethereal, right click, the option "Compare in
transaction/dialog manner with" is added, after choose one, then click
into another comparable SIP packet, then a window pop out showing result
something like "They are in the same transaction/dialog" or "They are
NOT in the same ...." And this result is coming from corresponding text
fields' comparison.

Looking forward to hints and help, many thanks!

Br,
Kai Kang

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@ethereal.com
http://www.ethereal.com/mailman/listinfo/ethereal-dev