Hello everyone, I am writing you about the source code for the conversation table in WireShark. More specifically, I am interested into the function that is in the menu Statistics -> Conversations. I found some source code file under the name conversations_table.c. Unfortunately, there is a serious lack of comments, thus making the code impossible to read. I would like to ask you, if it is possible, to tell me if this is the source code file for the conversations table? If it is, please send me some version with more comments if possible, or maybe explain to me shortly where exactly can I find the part where this conversations are made? I am really interested in this, and I would very much appreciate if you answer me as soon as possible. Thank you in advance. Kiril asked 10 Sep '12, 07:52  bluzerot |
One Answer:
Yes it is, together with the other conversations_*.c files, which are each just "handlers" for a certain protocol.
I don't think there is a "better/secret" version with more comments other than the code in the official sources. Unfortunately you are right, there is a serious lack of comments.
Most of it is in that file. If you choose "Statistics -> Conversations" the 'callback' function The conversations table(s) is/are filled by listeners, which are registered in the files conversations_*.c, like this: conversations_ip.c:register_tap_listener_ip_conversation(). Regards answered 10 Sep '12, 09:57  Kurt Knochner ♦ |
Thank you Kurt, you have already helped me a lot!
You said that most of the explanation to where the conversations are made are in conversations_table.c. Can you please tell me in which functions exactly is the algorithm of the conversations?
Thank you in advance
Kiril