Hi
some dynamic Dns update traffic is correctly decoded
with version 9.9 but the
Dns parser do not decode the same network trace in
version 10.11
see frame here from 9.9 :
5883 364.718750 0.000000 10.10.10.5
10.10.10.30
DNS Standard query response
cpt.test.int cpt2.soa.test.int 53 1068
5884 364.718750 0.000000 10.10.10.30
10.10.10.5
DNS Dynamic update SOA soa.test.int
cpt2.soa.test.int
cpt.test.int 1069 53
5885 364.718750 0.000000 10.10.10.5
10.10.10.30
DNS Dynamic update response, Refused CNAME
cpt2.soa.test.int cpt.test.int
cpt2.soa.test.int 53 1069
the same traffic from 10.11 version
No. Time Delta Source
Destination Protocol
Info
Src
MAC Dst MAC Src Port Dest
Port
5883 15:36:55.905143 0.000000 10.10.10.5
10.10.10.30
MDNS Standard query response
cpt.soa.test.int cpt2.soa.test.int 53 1068
5884 15:36:55.905143 0.000000 10.10.10.30
10.10.10.5
UDP Source port: 1069 Destination port: domain
cpt2.soa.test.int cpt.soa.test.int 1069 53
5885 15:36:55.905143 0.000000 10.10.10.5
10.10.10.30
UDP Source port: domain Destination port: 1069
cpt.soa.test.int cpt2.soa.test.int 53 1069
Is there any reason ?
Thanks
Frederic
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com