Ethereal-dev: Re: [ethereal-dev] non-standard UDP ports for standard protocolls ???

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: guy@xxxxxxxxxx (Guy Harris)
Date: Sat, 16 Jan 1999 00:25:17 -0800 (PST)
> If radius packets contain some sort of magic numbers,

Unfortunately, they don't appear to (RFC 2138).

> Else you can check
> the validity of the raduis packet before decoding it and if wrong, call
> the dissect_data routine (I used that in dissect_osi) ...

A *quick* look at RFC 2138 doesn't indicate that there are many fields
easily checked for validity - the first byte should be 1, 2, 3, 4, 5,
11, 12, or 13, and the length field must be between 20 and 4096, so
checking for that *might* not conclude that a packet is a RADIUS packet
when it's not.