Ethereal-dev: Re: [ethereal-dev] Decoding IP within other protos

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 06 Oct 1999 15:55:33 -0500
On Wed, Oct 06, 1999 at 10:33:56AM -0700, Guy Harris wrote:
> 
> Unfortunately, having just captured a trace in which I sent DNS requests
> to a machine that doesn't have a DNS server, I can't reproduce the
> problem - it cheerfully dissects the ICMP reply, perhaps because the
> query packet was small enough to fit in what's left of the ICMP reply
> after the IP and UDP headers of the reply.
> 
> Maybe I was looking at a trace in which a large DNS or NBNS *response*
> was sent back to somebody who wasn't listening....

I just now added DNS and ICMP to randpkt. The change is in CVS. Just
type 'make randpkt' to create the executable.

Attached is a 10-packet trace of random DNS packets.
Ethereal hangs when the first packet (and probably any packet) is
selected.

--gilbert

Attachment: random-dns.cap.gz
Description: Binary data