Ethereal-dev: Re: [ethereal-dev] slight improvent with packet-rpc.c - it sees more replies tha

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 11 Nov 1999 19:58:47 -0800 (PST)
> Here is a trace of yp/nis traffic doing an ls -al of my home directory.
> 
> Note that all of the calls are detected, but the replies are left as UDP
> packets, and are not recognized as RPC.

When I fire up Ethereal on it, I get a pile of UDP packets from
"stellar.cc.umr.edu" port 646 to "infinity.cc.umr.edu" on a variety of
ports; stepping through the UDP dissector showed that the first couple
of them appeared to be RPC replies, not requests, and the fact that
they're all coming from port 646 suggests that they may be replies.

Which frames are calls?