Wireshark · Ethereal-dev: Re: [Ethereal-dev] It was "the Thing", now is a plugin called mate

[LEGO <luis.ontanon@xxxxxxxxx>]

I think it probably does.

If you send me an example capture (and a brief description of what's
in what frame) I'll check.
It's being several years I haven't dealt myself with neither  DHCP nor TFTP.

Luis

On Fri, 19 Nov 2004 12:40:13 -0600, Edward Warnicke <hagbard@xxxxxxxxx> wrote:
> Could MATE be used to correlate, for example a Cable Modem bootup sequence.
> In that sequence you need to watch for:
> 
> A DHCP sequence
> A TFTP sequence from the IP in the DHCP request to the IP given in the
> DHCP server field.
> 
> Ed
> 
> 
> 
> 
> On Fri, 19 Nov 2004 17:05:28 +0000, Richard Urwin
> <richard@xxxxxxxxxxxxxxx> wrote:
> > On Friday 19 Nov 2004 12:03 pm, LEGO wrote:
> > > Let's do an example using DNS:
> >
> > Thanks for this example. It does look very interesting; I'll keep my eye
> > on it.
> >
> > > [snip]
> > > # this tells mate that a dns leg starts when the attribute dns_rsp is
> > > 0; Action=LegStart; On=dns; dns_rsp=0;
> > >
> > > # this tells mate that a dns leg stops when the attribute dns_rsp is
> > > 1; Action=LegStop; On=dns; dns_rsp=1;
> >
> > Is it a good idea to have an explicit start and stop? Howabout if the
> > ethereal machine, for some unknown routing reason, is receiving packets
> > out of order? Admittedly a slim possibility, seeing that the two
> > machines probably have to be receiving them in the right order, but
> > with complex PDUs it could happen.
> >
> > --
> > Richard Urwin
> >
> >
> >
> > _______________________________________________
> > Ethereal-dev mailing list
> > Ethereal-dev@xxxxxxxxxxxx
> > http://www.ethereal.com/mailman/listinfo/ethereal-dev
> >
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
> 


-- 
"I can't stand pain, it hurts me!"
-- Daffy Duck