Wireshark-users: [Wireshark-users] Force Decode as NFS
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Brock Noland <brock@xxxxxxxxxxxx>
Date: Thu, 25 Oct 2012 20:04:21 -0500
Hi,

I have some NFS 4 packets which are not decoding as NFS. As such they
show up as RPC "Continuation Data" I would like to force parsing them
in hopes of figuring why they are malformed. However when I right
click and then go to "Decode as" NFS is not an option.  Other NFS
packets are decoding just fine. I have observed this with 1.8.3 MacOS
and 1.2 RHEL 6.3.

Is there anyway to force decoding as NFS in hopes of finding the parse error?

Hex including below for the heck of it.

Brock


800000b8a48900320000000100000000000000060000001c040405ffffffffff
000000000fc3508e5cb32d64cf0493de76703e9a0000000000000004c0b2
a4630000000000000000000000800000006c606a06092a864886f712010
20202006f5b3059a003020105a10302010fa24d304ba003020112a24404
4236e14ab6b70b0be7fe9ff07febd3cc676f99339b3a2afc88aeadcde419b6
778fd2759d3518a5ecd809b0d639248d6c57a1565451832f90075d21d8b6
53f4028b6307