Ethereal-users: Re: [Ethereal-users] HSRP Decoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 30 May 2002 12:05:11 -0700
On Thu, May 30, 2002 at 08:22:19AM -0700, Erick B. wrote:
> Now, looking at the source code both the packet-snmp
> and packet-hsrp check udp.port which covers both
> source/dest I believe. I think these should be changed
> to udp.dstport

No.

The problem is that an SNMP *request* might be transmitted to port 161,
but there is no guarantee that the request comes from that port, and
thus no guarantee that SNMP *replies* are sent to that port - they're
not even necessarily sent *from* that port?