[Brad Hards <bhards@xxxxxxxxxxxxxx>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 8 Aug 2003 18:28 pm, Guy Harris wrote:
> However, it appears that the capture you sent has the middle of an RSYNC
> sequence, but not the beginning of the connection, and, unfortunately, I
> don't think Ethereal's RSYNC dissector can handle that, so, if you have
> started the capture in the middle of an RSYNC sequence, you will
> probably only be able to make sense out of that capture by manually
> decoding the raw hex data in the TCP segments - Ethereal's dissection
> will probably not be correct, even with the bug fix, so don't infer from
> it that the RSYNC session is necessarily invalid.
The code that I wrote for rsync is really, really rough. The rsync protocol is 
quite hard to work out - there are no "per packet" headers, so if you don't 
have the whole thing, it is very difficult to tell if the packet is showing 
part of the file being transferred, or some control commands, or some other 
text.
I'm not working on it, so if anyone wants to fix it, go for your life.

Brad
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE/M2dZW6pHgIdAuOMRAvWXAKCbwR0vo+3vHxhYtF8oOQLj5G/vUQCfVa3z
CAFpkHuf0BbSLyNOP5zSYsk=
=mQYi
-----END PGP SIGNATURE-----