Re: [ethereal-dev] slight improvent with packet-rpc.c - it sees morereplies than it did before, but still not all...

[Nathan Neulinger <nneul@xxxxxxx>]

Guy Harris wrote:
> 
> > Here is a trace of yp/nis traffic doing an ls -al of my home directory.
> >
> > Note that all of the calls are detected, but the replies are left as UDP
> > packets, and are not recognized as RPC.
> 
> When I fire up Ethereal on it, I get a pile of UDP packets from
> "stellar.cc.umr.edu" port 646 to "infinity.cc.umr.edu" on a variety of
> ports; stepping through the UDP dissector showed that the first couple
> of them appeared to be RPC replies, not requests, and the fact that
> they're all coming from port 646 suggests that they may be replies.
> 
> Which frames are calls?

How bizarre, when I looked at it yesterday, I could have sworn it
captured everything. It almost looks like it applied my filter settings
when it saved the file, but I didnt think ethereal did that. 

Anyway, I'll generate another trace as soon as I get into work that has
all the calls and replies. 

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@xxxxxxx
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216