tcpdump mailing list archives

Re: verbose decoding without assigned port number


From: Michael Richardson <mcr () sandelman ca>
Date: Thu, 31 Jan 2013 11:14:59 -0500


"Denis" == Denis Ovsienko <infrastation () yandex ru> writes:
    Denis> There are network protocols that have an assigned port
    Denis> number, and there are other that don't or are commonly used
    Denis> on non-assigned ports, such as HTTP on port 8080. Looking at
    Denis> function tcp_print() in file print-tcp.c, it is clear how the
    Denis> former are handled, but is there any assumed way to handle
    Denis> the latter? I am considering adding a ZeroMQ decoder to
    Denis> tcpdump, to be particular.

Currently the -T option is the only resort at the IP layer and UDP layer.
It could apply to TCP too, perhaps.

It would be nice to have a way for each ULP decoders to register their
name so that it's not so switch() stmt based, and then to have a file
which can be provided to map multiple ports at the same time.

-- 
]               Never tell me the odds!                 | ipv6 mesh networks [ 
]   Michael Richardson, Sandelman Software Works        | network architect  [ 
]     mcr () sandelman ca  http://www.sandelman.ca/        |   ruby on rails    [ 
        
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers


Current thread: