Guy Harris wrote: >And if "YMSG" means they begin with YMSG, then the reason why the >dissector rejects them is that nobody's added to the Yahoo Messenger >dissector the ability to dissect the version of the Yahoo Messenger >protocol that uses YMSG.
If someone is interested in updating the Yahoo dissector to support YMSG there are some links below that I collected a while ago (there is probably a lot more info out there somewhere). http://www.venkydude.com/articles/yahoo.htm http://www.cse.iitb.ac.in/~varunk/YahooProtocol.htm http://www.attrition.org/security/advisory/gobbles/GOBBLES-04.txt http://www.geocrawler.com/archives/3/4893/2002/1/0/7459037/ http://www.geocities.com/ziggycubbe/ym.html