Re: Protocol forcing in ethereal

Ulf Lamping <[email protected]> Fri, 28 Jul 2006 02:40:03 +0200
Newsgroups gmane.network.ethereal.user
Message-ID <[email protected]>
Ellington, Jerry wrote:
> Is there a way to set up protocol forcing?  I need to do one of the 
> following:
>  
> 1) if TCP port = 8473, then ISO-DE
>     or
> 2) if TCP port = 8473, then skip 4, CLNP
>  
For "normal TCP" purposes, you would use the "Decode As" feature.

However, I'm wondering why you'd have to choose at all.

As I'm only familiar with the RFC1006 COTP things (never used the 
networking layer of ISO), so I might be wrong with the following.

Even ISO-DE should behave similiar to CLNP in that layer (or am I 
wrong?). So I don't see a *reason* to force a protocol decoding in that 
case.

Regards, ULFL