Ethereal-users: RE: [Ethereal-users] Support for Tibco RV protocol, and protocols in general

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Shepheard, Toby (London)" <Toby_Shepheard@xxxxxx>
Date: Thu, 9 Mar 2006 10:54:38 -0000
Sounds like a non-trivial job. I'll try to get some logs together when I
have a bit more spare time but its an on-the-side project for me so
might not happen for some time.

Thanks for your input on this, it's much appreciated. I'll post again if
I get anywhere with it.

-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx] On Behalf Of LEGO
Sent: 08 March 2006 18:02

On 3/8/06, Shepheard, Toby (London) <Toby_Shepheard@xxxxxx> wrote:

> 2) How would I go about creating support for a new protocol, and how
complex
> would this be given that it sits on top of UDP.

No specs available on what's on the packet so it's a reverse
engineering job. (I tried once, but not having but few packets
available could no realy figure out almost nothing.

I know that there is some variation of PGM over which transport is
built, but I had not enough info to  even figure out where the PGMlike
header stopped and where the marshalled data began.


The first thing needed to begin againg the reveng process is to have a
large set of  capturefiles and  the contemporary output of the RV
Snoop command with the most accurate timestamps possible. (maybe
placed in http://wiki.ethereal.com/Tibco )
--------------------------------------------------------

If you are not an intended recipient of this e-mail, please notify the sender, delete it and do not read, act upon, print, disclose, copy, retain or redistribute it. Click here for important additional terms relating to this e-mail.     http://www.ml.com/email_terms/
--------------------------------------------------------