Ethereal-dev: Re: [Ethereal-dev] Cisco IP phone and RFC 1350

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 23 Dec 2000 23:21:57 -0800
On Sun, Dec 24, 2000 at 03:06:45PM +0800, jonathan wrote:
>     I was using ethereal to determine the contents of some TFTP packets.
>     Now according to RFC 1350 (which is the latest RFC on TFTP as far
> as I know), the format of read request packets (RRQ) is : 
> 
> 
>           2 bytes    string   1 byte     string   1 byte
>           -----------------------------------------------
>    RRQ/  | 01/02 |  Filename  |   0  |    Mode    |   0  |
>    WRQ    -----------------------------------------------
>           
>  However, when using Ethereal I find in the protocol tree of TFTP an
> 'option' field. Does anyone have any idea why this is the case?

It's probably RFC 2347 "TFTP Option Extension".

(However, from the screenshot, Ethereal appears to have some problem
dissecting it - it appears to think the first character of the option is
an ISO 8859/1 "degree" symbol, right before the "http:".)