Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: [Ethereal-users] Dynamic Dns parser from 10.11 version

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Frederic Cardoso <fcnet@xxxxxxxxx>
Date: Wed, 22 Jun 2005 14:38:26 -0700 (PDT)
Hi 

some dynamic Dns update traffic is correctly decoded
with version 9.9 but the 
Dns parser do not decode the same network trace in
version 10.11
see frame here from 9.9 :
   5883 364.718750  0.000000    10.10.10.5          
10.10.10.30          
DNS      Standard query response                      
                  
cpt.test.int cpt2.soa.test.int 53       1068
   5884 364.718750  0.000000    10.10.10.30         
10.10.10.5           
DNS      Dynamic update SOA soa.test.int              
   cpt2.soa.test.int 
cpt.test.int 1069     53
   5885 364.718750  0.000000    10.10.10.5          
10.10.10.30          
DNS      Dynamic update response, Refused CNAME
cpt2.soa.test.int cpt.test.int 
cpt2.soa.test.int 53       1069

the same traffic from 10.11 version
No.     Time            Delta       Source            
   
Destination           Protocol 
Info                                                  
         Src 
MAC               Dst MAC               Src Port Dest
Port
   5883 15:36:55.905143 0.000000    10.10.10.5        
  10.10.10.30          
MDNS     Standard query response                      
                  
cpt.soa.test.int cpt2.soa.test.int 53       1068
   5884 15:36:55.905143 0.000000    10.10.10.30       
  10.10.10.5           
UDP      Source port: 1069  Destination port: domain  
                  
cpt2.soa.test.int cpt.soa.test.int 1069     53
   5885 15:36:55.905143 0.000000    10.10.10.5        
  10.10.10.30          
UDP      Source port: domain  Destination port: 1069  
                  
cpt.soa.test.int cpt2.soa.test.int 53       1069

Is there any reason ?
Thanks 
Frederic

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com