Ethereal-dev: RE: [Ethereal-dev] bug in socks - displays version '255' in the f irst SOCKS tun

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jeff Foster <jfoste@xxxxxxxxxxxx>
Date: Thu, 12 Feb 2004 16:01:47 -0600
My mistake. You are correct, the version is shown as 255.
I was thrown off by the TELNET on the protocol field.

Jeff F>

-----Original Message-----
From: Jeff Foster [mailto:jfoste@xxxxxxxxxxxx]
Sent: Thursday, February 12, 2004 3:50 PM
To: 'Ethereal development'
Cc: 'ykaul@xxxxxxxxxxxx'
Subject: RE: [Ethereal-dev] bug in socks - displays version '255' in the
f irst SOCKS tunnelled Telnet



I review the trace using the cvs version of ethereal and the ninth
packet is decoded as TELNET. 

What version are you running? 

Jeff Foster


-----Original Message-----
From: Yaniv Kaul [mailto:ykaul@xxxxxxxxxxxx]
Sent: Wednesday, February 11, 2004 10:12 AM
To: Ethereal '
Subject: [Ethereal-dev] bug in socks - displays version '255' in the
first SOCKS tunnelled Telnet


It seems that the SOCKS parser is parsing the first byte of the telnet 
connection, which by chance is 0xFF (a telnet option), and thinks its 
the version number of SOCKS...
Please see attached dump, packet 9.



***
The information in this email is confidential and intended solely for the
individual or entity to whom it is addressed. If you have received this
email in error please notify the sender by return e-mail, delete this email,
and refrain from any disclosure or action based on the information.
****


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev


***
The information in this email is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this email in error please notify the sender by return e-mail, delete this email, and refrain from any disclosure or action based on the information.
****