Ethereal-dev: Re: [ethereal-dev] slight improvent with packet-rpc.c - it sees morereplies tha
Guy Harris wrote:
>
> > Here is a trace of yp/nis traffic doing an ls -al of my home directory.
> >
> > Note that all of the calls are detected, but the replies are left as UDP
> > packets, and are not recognized as RPC.
>
> When I fire up Ethereal on it, I get a pile of UDP packets from
> "stellar.cc.umr.edu" port 646 to "infinity.cc.umr.edu" on a variety of
> ports; stepping through the UDP dissector showed that the first couple
> of them appeared to be RPC replies, not requests, and the fact that
> they're all coming from port 646 suggests that they may be replies.
>
> Which frames are calls?
How bizarre, when I looked at it yesterday, I could have sworn it
captured everything. It almost looks like it applied my filter settings
when it saved the file, but I didnt think ethereal did that.
Anyway, I'll generate another trace as soon as I get into work that has
all the calls and replies.
-- Nathan
------------------------------------------------------------
Nathan Neulinger EMail: nneul@xxxxxxx
University of Missouri - Rolla Phone: (573) 341-4841
Computing Services Fax: (573) 341-4216