Ethereal-dev: Re: [Ethereal-dev] DNS requests being dissected as NetBIOS name l ookups

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Mon, 13 Nov 2000 18:29:42 -0800 (PST)
> 4) Have DNS register it's dissector on both ports (53&137) and call
>    dissect_nbns if the traffic isn't to port 53.

DNS replies aren't *to* port 53, they're *from* port 53.  Presumably you
meant "call 'dissect_nbns()' if it's a request to a port other than 53
or a reply from a port other than 53".

> 5) Have WINS register it's dissector on both ports (53&137) and call
>    dissect_dns if the traffic isn't from port 137 to port 137.

I know of one NetBIOS-over-TCP implementation that doesn't send NetBIOS
Name Service requests from port 137 - or, at least, it didn't do so when
I originally wrote it; I haven't checked to see if anybody changed it. 
(RFC 1001 and 1002 don't require it.)

So, in that case, the NBNS dissector would call "dissect_dns()" if it
was a request to a port other than 137 or a reply from a port other than
137.