Ethereal-dev: Re: [ethereal-dev] found the rpc problem - not sure if ethereal will ever be abl

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Fri, 12 Nov 1999 13:31:39 -0800 (PST)
> Turns out that the problem was that my ypserver is multihomed and the
> requests are coming back on a different interface. (Actually virtual
> interface, not a separate card.) The capture is attached.
> 
> Requests are going in a virtual interface, and are coming out the primary on
> the same card. 
> 
> That appears to be why it was failing to detect the situation. 

"snoop" appears to handle this - it even recognized frame 6 as a reply
to frame 5, even though the hosts were different.

I wonder whether it looks *only* at port numbers (and transaction IDs),
or if it looks for a match on the port numbers and at least one of the
IP addresses, e.g. trusting the sender address of the request and the
recipient address of the reply.

BTW, the DNS entries for "stellar" and "nissrv3" seem to disagree about
the nature of the machine:

	tooting$ nslookup
	> set type=any
	> server jupiter.cc.umr.edu.
	> stellar.cc.umr.edu.
 
		...

	stellar.cc.umr.edu      CPU = hp9000-735        OS = hpux

		...

	> nissrv3.cc.umr.edu.

		...

	nissrv3.cc.umr.edu      CPU = ibm-pc    OS = linux

		...