-----BEGIN PGP SIGNED MESSAGE-----


>>>>> "Darren" == Darren Reed <[EMAIL PROTECTED]> writes:
    Darren> This is not really convenient when you happen to run a service on a
    Darren> different port and want to make use of tcpdump's in-built decoding.
    Darren> (This may also apply to ethereal...)

    Darren> WHat I'd like to be able to do, for example, is say port 5353 should
    Darren> be decoded as "domain" traffic or that port 53 is ssh or ...

  Noot entirely what you want, but:

        -T    Force packets selected by "expression" to be inter-
              preted the specified type.  Currently  known  types
              are  rpc  (Remote  Procedure  Call), rtp (Real-Time
              Applications protocol),  rtcp  (Real-Time  Applica-
              tions  control  protocol), vat (Visual Audio Tool),
              and wb (distributed White Board).

  It could be extended.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Processed by Mailcrypt 3.5.5, an Emacs/PGP interface

iQCVAwUBOxOpOoqHRg3pndX9AQE61QQAlTTSYuBFWoIpjcmFntQekMQm/sCTwzUp
QTLZherpM1uyF23OY3mZ0onw9gysmzXJhy3KDl7BAu8b2DEqPGeUuc2GmFZKKlUC
0NWnk/cDPVwj9oVCVbHZ9tJGkpBeTpT5JyrhPn0PBPmy6I8lZ7r9KweBP8pEMc7D
GHs2mP0NLv8=
=2wMV
-----END PGP SIGNATURE-----
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to