>What worries me are the cases in which an address is used (perhaps by >another host) *before* a name lookup is made. That's a good point. In NETMON that's not a problem because displaying names is a "live" thing that can be turned on and off via a menu item. So if you pick up a name somewhere in the capture, it essentially "goes back" and updates all affected packets. If you open the address book dialog and edit a name, all affected displayed packets change as soon as you close the dialog. I guess in Ethereal you could do the two-pass thing you mentioned. If you are concerned abou this being time-consuming you could make it so the user had to pick a menu item to "apply" new names to the display. ===================================== Tim Farley Software Engineer tfarley@xxxxxxx Internet Security Systems, Inc. (678) 443-6000 / Direct Dial (678) 443-6189 / fax (678) 443-6479 http://www.iss.net Adaptive Network Security for the Enterprise =====================================
Powered by MHonArc 2.6.10