Ethereal-users: Re: [Ethereal-users] How does ethereal identify tftp transfer (I have changed Em

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Malcolm Jackson" <Malcolm.Jackson@xxxxxxxxxxxxxxxx>
Date: Mon, 06 Mar 2006 16:26:56 +0000
Your Email has been successfully delivered to me. 
Please remove me from your Frequent Contacts address book 
and find me in the Novell GroupWise Address Book.

Alternatively please send to my firstname.lastname@xxxxxxxxxxxxxxxx
Address.


>>> ethereal-users 03/06/06 15:49 >>>

Hello,

I am trying to understand how does ethereal identifies
tftp data packets. I am running ethereal on the server
machine. When i initiate the tftp transfer from
clinet, my client uses a local udp port number 'x' and
dest port is well defined tftp port 69.

Now server responds back with a local udp source port
'y'destined to port 'x'. Subsequently, all the data
transfer happens using these two ports. On capturing
the packets in ethereal, it correctly identifies all
the data packets as belonging to a tftp connection.

The question is how does ethereal identifies this.
Does it mark the original client port number 'x' in
the first request packet to identify all the
subsequent packets with source port 'x' as belonging
to tftp..?

Thanks for your help,
Nitin


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users


This message has been checked for viruses but the contents of an attachment
may still contain software viruses, which could damage your computer system:
you are advised to perform your own checks. Email communications with the
University of Nottingham may be monitored as permitted by UK legislation.