Ethereal-users: [Ethereal-users] Wrong decode ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "Ulf Bertilsson" <ulf.bertilsson@xxxxxxxxxxxx>
Date: Thu, 20 Sep 2001 11:26:52 +0200
Hi,

I'm using Ethereal quite often now, and I seems to come
up with the faq't that some packets get decoded wrong.

It decode some packets as Protocol "Iscsi", "Nop Out"

This packet is an usual tcp transmission aik.
It's not an "Iscsi", aik.

Suggestions ?, Ideas ?

Here en example dump (Note removal off MAC/ip)

Versions:
Ethereal Win32 V0.8.19.0
GTK+ V1.3.0.50
OS Win2000, Sp2



Frame 33 (105 on wire, 105 captured)
    Arrival Time: Sep 20, 2001 11:01:35.079334
    Time delta from previous packet: 0.000559 seconds
    Time relative to first packet: 6.369298 seconds
    Frame Number: 33
    Packet Length: 105 bytes
    Capture Length: 105 bytes
Ethernet II
    Destination: 00:06:29:.....
    Source: 00:c0:95:....
    Type: IP (0x0800)
Internet Protocol, Src Addr: *.*.*.* , Dst Addr: 195.204.*.*
    Version: 4
    Header length: 20 bytes
    Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00)
        0000 00.. = Differentiated Services Codepoint: Default (0x00)
        .... ..0. = ECN-Capable Transport (ECT): 0
        .... ...0 = ECN-CE: 0
    Total Length: 91
    Identification: 0xbf6d
    Flags: 0x04
        .1.. = Don't fragment: Set
        ..0. = More fragments: Not set
    Fragment offset: 0
    Time to live: 128
    Protocol: TCP (0x06)
    Header checksum: 0x59f1 (correct)
    Source: 195......
    Destination: 195.....
Transmission Control Protocol, Src Port: 1778 (1778), Dst Port: 18181
(18181), Seq: 360016869, Ack: 2253443478
    Source port: 1778 (1778)
    Destination port: 18181 (18181)
    Sequence number: 360016869
    Next sequence number: 360016920
    Acknowledgement number: 2253443478
    Header length: 20 bytes
    Flags: 0x0018 (PSH, ACK)
        0... .... = Congestion Window Reduced (CWR): Not set
        .0.. .... = ECN-Echo: Not set
        ..0. .... = Urgent: Not set
        ...1 .... = Acknowledgment: Set
        .... 1... = Push: Set
        .... .0.. = Reset: Not set
        .... ..0. = Syn: Not set
        .... ...0 = Fin: Not set
    Window size: 8760
    Checksum: 0x739d (correct)
iSCSI (NOP Out)
    Opcode: NOP Out (0x00)
    Flags: 0x00
        0... .... = P: No poll requested
    Length: 0x00020001
    LUN: 0106EF2000020004
    InitiatorTaskTag: 0x0002000f
    TargetTransferTag: 0xc3cca80b
    CmdSN: 0xc3ccacd2
    ExpStatSN: 0x075f0019
    ExpCmdSN: 0x00000019
    BufferOffset: 0x5f313030
    Payload: 373636

0000  00 06 29 d5 06 73 00 c0 95 e4 28 dd 08 00 45 00   ..)..s....(...E.

0010  00 5b bf 6d 40 00 80 06 59 f1 c3 cc ac d1 c3 cc   .[[email protected].......

0020  ac d3 06 f2 47 05 15 75 6b e5 86 50 d1 96 50 18   ....G..uk..P..P.

0030  22 38 73 9d 00 00 00 00 00 33 00 02 00 01 01 06   "8s......3......

0040  ef 20 00 02 00 04 00 02 00 0f c3 cc a8 0b c3 cc   . ..............

0050  ac d2 07 5f 00 19 00 00 00 19 6d 61 69 6c 5f 31   ..._......mail_1

0060  30 30 30 37 39 33 37 36 36                        000793766