Ethereal-dev: Fw: [Ethereal-dev] improved NTP decoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 13 Nov 2003 19:06:12 +1100
In the standard yes, in Ethereal no.
The current set of h.xxx protocols in ethereal should not have conflicts or
multiple hf fields that share the same filter name
to avoid this very issue.

 From: "Andreas Sikkema"
Sent: Thursday, November 13, 2003 8:59 AM
Subject: Re: [Ethereal-dev] improved NTP decoding
>
> Matthias Drochner wrote:
>
> > It is fine from the NTP point of view -- I just wasn't sure it is legal
> > to use one hf_* node multiple times within one packet. The documentation
> > isn't clear about this. In real live as far as I've seen, multiple
> > extensions didn't happen. So I couldn't test and preferred to be
conservative.
>
> It is not unusual for H.323 packets to contain multiple instances of a
> certain construct, which means, multiple instances of an hf_ value.
>