Ethereal-users: Re: [Ethereal-users] Where is the decodes as GIOP option?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 8 Mar 2002 03:36:09 -0800
On Thu, Mar 07, 2002 at 11:48:41PM -0800, Bob wrote:
> You wrote the heuristic engine does the work.
> I think it does not recognize all the Corba traffic.
> 
> It tells me there is 'Data (76 bytes)' at the end of
> the headers of this UDP datagram.

At the end of the UDP header, or at the end of GIOP headers?

> In the Hex dump I clearly see the words 'Message' and
> 'ORBeline 2.0' which means it is corba traffic.

Does the UDP datagram's payload (i.e., what comes after the UDP header)
start with "GIOP"?  If it doesn't, then it's *not* a GIOP packet, at
least as defined by the Ethereal GIOP dissector.