Ethereal-users: [Ethereal-users] Re: Ethereal-usersEthereal v0.9.16 Dissection of SNMPv2 Counter

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Wes Hardaker <wjhns36@xxxxxxxxxxxxx>
Date: Tue, 09 Dec 2003 10:01:02 -0800
>>>>> On Mon, 8 Dec 2003 17:49:38 -0500, "Mark Symons" <msymons@xxxxxxxxxxxxxxxxxx> said:

Mark> An SNMPv2 trap with a Varbind of Syntax Counter32 and value (decimal) 1000 has the following data for that Counter64:
Mark> 46 02 03 e8

Mark> Ethereal v0.9.16 dissects this as:

Mark> Value: Length is 2, should be 8

Mark> Is this correct behaviour?  Why should the Counter64 value have
Mark> to be fixed length in the trap?

No, thats not correct.  The length check part of the code looks like
it was copied from the IPADDR field above it, which must have 4
bytes.  Counter64s data across the wire should have any length.

-- 
Wes Hardaker
Sparta