My mistake. You are correct, the version is shown as 255.
I was thrown off by the TELNET on the protocol field.
Jeff F>
-----Original Message-----
From: Jeff Foster [mailto:jfoste@xxxxxxxxxxxx]
Sent: Thursday, February 12, 2004 3:50 PM
To: 'Ethereal development'
Cc: 'ykaul@xxxxxxxxxxxx'
Subject: RE: [Ethereal-dev] bug in socks - displays version '255' in the
f irst SOCKS tunnelled Telnet
I review the trace using the cvs version of ethereal and the ninth
packet is decoded as TELNET.
What version are you running?
Jeff Foster
-----Original Message-----
From: Yaniv Kaul [mailto:ykaul@xxxxxxxxxxxx]
Sent: Wednesday, February 11, 2004 10:12 AM
To: Ethereal '
Subject: [Ethereal-dev] bug in socks - displays version '255' in the
first SOCKS tunnelled Telnet
It seems that the SOCKS parser is parsing the first byte of the telnet
connection, which by chance is 0xFF (a telnet option), and thinks its
the version number of SOCKS...
Please see attached dump, packet 9.
***
The information in this email is confidential and intended solely for the
individual or entity to whom it is addressed. If you have received this
email in error please notify the sender by return e-mail, delete this email,
and refrain from any disclosure or action based on the information.
****
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
***
The information in this email is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this email in error please notify the sender by return e-mail, delete this email, and refrain from any disclosure or action based on the information.
****