Ethereal-users: RE: [Ethereal-users] Looking for a Siebel Resonate Decode

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Visser, Martin" <martin.visser@xxxxxx>
Date: Wed, 25 Aug 2004 12:37:37 +1000
Title: Looking for a Siebel Resonate Decode
I notice from a previous posting you said it was using IP protocol numbers 173 and 174. As they aren't using the standard transport layers (such as TCP or UDP)  it is almost impossible to know how Siebel are encapuslating their data within the the IP packet. You either have to guess from the contents or contact the designers of the protocol. If you are guessing you might have to understand the protocol model eg Is it a sequence of Request, Acknowledge/Response.  (Or simply Push, Push, Push, Push, Ack.. Or ......). So to reverse-engineer it you need to understand what it is trying to do, how it might achieve it, and interatively figure it out from the contents.
 
(Of course seeing that they aren't publishing the protocol they might be intentionally obfuscating the protocol just to be difficult. This is probably assumption by the manufacturer that you never need to understand how it works, but that you should either trust them or rely on their support :-)
 
 
Regards, Martin

Martin Visser ,CISSP
Network and Security Consultant
Consulting & Integration
Technology Solutions Group - HP Services

3 Richardson Place
North Ryde, Sydney NSW 2113, Australia

Phone: +61-2-9022-1670   
Mobile: +61-411-254-513
Fax: +61-2-9022-1800    
E-mail: martin.visserAThp.com
 

 


From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of henrysteinhauer@xxxxxxxxxxxxxxxxxxxxxx
Sent: Wednesday, 25 August 2004 5:20 AM
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] Looking for a Siebel Resonate Decode

Hello -

I love the product -

We are putting in Siebel Web release and are using the Resonate to do load balancing.

There is a lot of traffic between servers and this is in a resonate protocol. 

I can send samples of this - but do not know how to dig inside the details to know how it is working.

Anyone have ideas on how to decode ?

Thanks for your insights.

henry