Ethereal-dev: Re: [ethereal-dev] slight improvent with packet-rpc.c - it sees morereplies tha

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Nathan Neulinger <nneul@xxxxxxx>
Date: Fri, 12 Nov 1999 07:18:43 -0600
Guy Harris wrote:
> 
> > Here is a trace of yp/nis traffic doing an ls -al of my home directory.
> >
> > Note that all of the calls are detected, but the replies are left as UDP
> > packets, and are not recognized as RPC.
> 
> When I fire up Ethereal on it, I get a pile of UDP packets from
> "stellar.cc.umr.edu" port 646 to "infinity.cc.umr.edu" on a variety of
> ports; stepping through the UDP dissector showed that the first couple
> of them appeared to be RPC replies, not requests, and the fact that
> they're all coming from port 646 suggests that they may be replies.
> 
> Which frames are calls?

How bizarre, when I looked at it yesterday, I could have sworn it
captured everything. It almost looks like it applied my filter settings
when it saved the file, but I didnt think ethereal did that. 

Anyway, I'll generate another trace as soon as I get into work that has
all the calls and replies. 

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216