Ethereal-users: Re: [Ethereal-users] IP Multicast/UDP Data Packet Analysis Problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 17 Sep 2004 09:41:12 -0700
Phil.Crescioli@xxxxxxxxxx wrote:
FYI - I opened one of the data sets in Ethereal I had previously saved on the Linux box, then I went and disabled the RX protocol as you suggested, and wala, the UDP Data Packet I expected in the First place was there! I analyzed the hex UDP data enough to verify the UDP data packets are correct. And yes, the data was being sent and received via port 7000, so (I assume, from your comments) that's why Ethereal was showing it as an RX protocol at the highest level? 

Yes.
This brings me to a follow up comment from me to Ethereal Developers: If I'm sending UDP packets to/from port 7000, can Ethereal be coded so as to know it's not an Rx packet and actually just a UDP packet?
*If* there's a reasonably reliable way to determine whether a putative RX packet is, in fact, really an RX packet, Ethereal's RX dissector could "reject" packets it's handed so that they're not dissected as RX packets.