Ethereal-dev: RE: [Ethereal-dev] Misdissection from the diameter dissector

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Biot Olivier <Olivier.Biot@xxxxxxxxxxxxxxx>
Date: Tue, 24 Sep 2002 15:28:09 +0200
Hi all,

This very common situation could lead to a new Ethereal feature. When two
possibilities exist, then both *should* be tested. Ulf's diameter<->rpc
decode would result in:  diameter decoding does not work, thus try rpc
(which by miracle works). If both fail, then the default information should
be shown (last known protocol layer, typically TCP or UDP).

Any comments on this?

Regards,

Olivier

-----Original Message-----
From: Ulf Lamping
Sent: dinsdag 24 september 2002 10:22
To: Ethereal
Subject: [Ethereal-dev] Misdissection from the diameter dissector


Hi List!

A minor problem I have noticed:

[ snip snip ]

-The diameter dissector should not decode the corresponding packets as
diameter packets, as they are using the ports 1812 (diameter) and 135 (rpc),
and are really DCE-RPC packets.
I have fixed this by setting the diameter port in the preferences to a
different value (I'm not using diameter).

-In the console comes a lot of messages like the ones above, which shouldn't
be there I think.

Regards ULFL