> >When disabling rpc protocol I don't get any crash. > Same for me here. And more specifically, when disabling only the NFS protocol (RPC enabled again) I don't get a crash either. (At least on Ethereal 0.9.5, Win98. Haven't been able to check on my Ethereal 0.9.7 installation yet.)
This seems to prove my initial suspicion that there is either a problem with the NFS dissector of Ethereal, or a serious problem with my NFS servers/clients ;) Which is, by the way, the reason I started doing the NFS traces in the first place, so I wouldn't be surprised if in the end it turned out that my NFS server/clients are sending 'illegal' or 'malformed' NFS requests/replies that cause Ethereal to choke here. (But that is just a suspicion at this point). Please dont hesitate to let me know if additional information is needed, and I will do my very best to supply it. If people thought it would help I could, for example, do a trace of a similar session on my NFS server (with either AIX iptrace or AIX tcpdump), and submit the ASCII interpretation of that session to the list, so people would at least be able to see the contents of the packets that travel the network and wind up in the tracefile that cause a crash. Sincerely, J.Smith
