Wireshark-bugs: [Wireshark-bugs] [Bug 12265] RPC/NFS incorrectly decodes as ACAP

Date: Wed, 16 Mar 2016 07:15:00 +0000

Comment # 2 on bug 12265 from
The ACAP RFC states that the protocol *listens* on port 674:

https://tools.ietf.org/html/rfc2244
2.1.     Link Level
   The ACAP protocol assumes a reliable data stream such as provided by
   TCP.  When TCP is used, an ACAP server listens on port 674.

In the attachment, the connection is started with a SYN to port 2049, so 2049
must have been the listener, not 674.

Port 2049 is listed as NFS in the IANA URL you provided.

Hence, this stream should have been recognized as being NFS, not ACAP.


You are receiving this mail because:
  • You are watching all bug changes.