Comments on: Hand-decoding tcpdump’ed SNMPv1 packets http://dossy.org/2008/02/handdecoding-tcpdumped-snmpv1-packets/ Everything that comes out of Dossy, from the strange to the banal. Sat, 13 Mar 2010 03:30:11 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Jamie Rasmussen http://dossy.org/2008/02/handdecoding-tcpdumped-snmpv1-packets/comment-page-1/#comment-1036 Jamie Rasmussen Mon, 03 Mar 2008 02:55:14 +0000 http://dossy.org/archives/000602.html#comment-1036 Ethereal is probably sufficient for whatever you're doing, but new development is being done under the name "Wireshark". http://www.wireshark.org/ Ethereal is probably sufficient for whatever you’re doing, but new development is being done under the name “Wireshark”.
http://www.wireshark.org/

]]> By: Dossy http://dossy.org/2008/02/handdecoding-tcpdumped-snmpv1-packets/comment-page-1/#comment-1035 Dossy Thu, 21 Feb 2008 17:11:16 +0000 http://dossy.org/archives/000602.html#comment-1035 Guan: At first, I thought not--I can't run Ethereal on the host that's able to capture the packets. However, I can write the capture file and ship that to another machine where I <em>can</em> run Ethereal. Duh! This also helped me track down the bug I've been fighting with for the last half-hour: I'm apparently computing the IP header and UDP header checksums wrong, which Ethereal clearly tells me I got wrong--and, what it should have been! Yay! Thanks! Guan: At first, I thought not–I can’t run Ethereal on the host that’s able to capture the packets. However, I can write the capture file and ship that to another machine where I can run Ethereal. Duh!

This also helped me track down the bug I’ve been fighting with for the last half-hour: I’m apparently computing the IP header and UDP header checksums wrong, which Ethereal clearly tells me I got wrong–and, what it should have been! Yay!

Thanks!

]]> By: Guan Yang http://dossy.org/2008/02/handdecoding-tcpdumped-snmpv1-packets/comment-page-1/#comment-1034 Guan Yang Thu, 21 Feb 2008 16:47:49 +0000 http://dossy.org/archives/000602.html#comment-1034 Can't you get Ethereal to do this for you? Can’t you get Ethereal to do this for you?

]]>