Hello! I have attached a tcpdump file with one NFS and one NLM packet. Both are related to the same file (file handle). If I try to "Match Selected" in the 2nd (NLM) packet for NLM/object/file number/inode I get the display filter expression "nfs.fh.fn == 225737" but this filter finds only the 1st (NFS) packet. Does this mean, that the first part of a variable name "nfs.fh.fn" -> "nfs" leads to packets with this protocol only? In fact I implemeted the file handle parse code only for this kind of application. The NFS mount process is another example, where the same file handle comes in different protocols but is always parsed and included in the tree with the same function and the same names (nfs.fh....). I never looked a the display filter code, so I have no idea where to search for this problem. Uwe
Attachment:
fn.gz
Description: application/gunzip
Powered by MHonArc 2.6.10