Ethereal-dev: [Ethereal-dev] TCP DNS requests are reliably split ... sometimes

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Mark Pizzolato" <ethereal-dev-20030907@xxxxxxxxxxxxxxxxx>
Date: Thu, 2 Oct 2003 15:48:54 -0700
Some Versions of BIND make some of the TCP queries to another server that end up delivering the request in 2 TCP packets.  The first contains a 2 byte packet length for the data contained in the second packet.
 
As a result of this request spanning 2 packets, Ethereal's Disector can't decode the actual request data.  It would be nice if I could select the DNS packet contents and right click and say display as DNS, but that doesn't work.
 
So, aside from getting the affected versions of BIND (and all the depoyed machines) fixed, what can be done to help.
 
Thanks.
 
- Mark Pizzolato