Hi,
These peer-to-peer protocols use registered ports.
Therefore; no reverese engineering is required.
Thanks,
Reza
-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxx]
Sent: Monday, February 24, 2003 2:31 PM
To: Fardid, Reza
Cc: 'ethereal-users@xxxxxxxxxxxx'
Subject: Re: [Ethereal-users] File Sharing and Media Protocols
On Mon, Feb 24, 2003 at 01:54:52PM -0800, Fardid, Reza wrote:
> Does Ethereal currently support the following protocols ?
>
> o FastTrack (peer-to-peer)
> o WinMX (peer-to-peer)
I don't know - I've never heard of them - but I suspect not (unless
they're carried by HTTP, or something such as that, in which case the
HTTP part, at least, will be dissected).
> o Real Player
Only the non-proprietary parts (e.g., RTSP/RTCP/RTP) are dissected. I
don't know how much public information there is about the proprietary
parts, e.g. whether any of it is described in the open-source Helix
stuff.
> o Windows Media Player
The WMP protocols are, as far as I know, proprietary; nobody's
reverse-engineered the protocols.
> o NetMeeting
I *think* that may use H.323, in which case Andreas Sikkema's H.323
plugin might help:
http://www.voice2sniff.org/
> What about IPSec ?
Some of that might be there.
> If not, then is there a process for requesting the addition of these
> protocols and others ?
http://www.ethereal.com/faq.html#q1.3
There's no "steering committee" or "development team" that develops
protocol dissectors; they're contributed by members of the community.
They will get added only if somebody out there decides to implement them
(which might involve reverse-engineering protocols, which might require
a considerable effort). You could request that somebody do it, but that
doesn't guarantee that it'll ever happen.