Ethereal-dev: Re: [Ethereal-dev] It was "the Thing", now is a plugin called mate

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Edward Warnicke <hagbard@xxxxxxxxx>
Date: Fri, 19 Nov 2004 12:40:13 -0600
Could MATE be used to correlate, for example a Cable Modem bootup sequence.
In that sequence you need to watch for:

A DHCP sequence
A TFTP sequence from the IP in the DHCP request to the IP given in the
DHCP server field.

Ed


On Fri, 19 Nov 2004 17:05:28 +0000, Richard Urwin
<richard@xxxxxxxxxxxxxxx> wrote:
> On Friday 19 Nov 2004 12:03 pm, LEGO wrote:
> > Let's do an example using DNS:
> 
> Thanks for this example. It does look very interesting; I'll keep my eye
> on it.
> 
> > [snip]
> > # this tells mate that a dns leg starts when the attribute dns_rsp is
> > 0; Action=LegStart; On=dns; dns_rsp=0;
> >
> > # this tells mate that a dns leg stops when the attribute dns_rsp is
> > 1; Action=LegStop; On=dns; dns_rsp=1;
> 
> Is it a good idea to have an explicit start and stop? Howabout if the
> ethereal machine, for some unknown routing reason, is receiving packets
> out of order? Admittedly a slim possibility, seeing that the two
> machines probably have to be receiving them in the right order, but
> with complex PDUs it could happen.
> 
> --
> Richard Urwin
> 
> 
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>