Ethereal-users: [Ethereal-users] Re: decode as SNMP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Wes Hardaker <wjhns36@xxxxxxxxxxxxx>
Date: Wed, 03 Sep 2003 07:03:25 -0700
>>>>> On Tue, 2 Sep 2003 22:58:24 -0700, Guy Harris <guy@xxxxxxxxxxxx> said:

Guy> 1) SNMP PDUs inside a fragmented UDP datagram start at the
Guy> beginning of the first fragment and end at the end of the last
Guy> fragment; there is no guarantee that an SNMP PDU sent over
Guy> TCP will begin at the beginning of a TCP segment and end at
Guy> the end of a TCP segment;

Guy> 2) TCP has no idea where the SNMP PDU begins or ends; IP *does*
Guy> know when the fragmented IP datagram begins and ends".

FYI, there is some code in the Net-SNMP package that does this
calculation and you could use it (call it or steal it) to help you in
this case...

-- 
Wes Hardaker
Sparta