Subj : pkt viewer
To   : Alan Ianson
From : mark lewis
Date : Sun May 22 2016 07:24 am


22 May 16 03:48, you wrote to me:

ml>>  AI> Does anyone know of a pkt viewer that will indicate the type or
ml>>  AI> version of pkt you are viewing?
ml>>
ml>> can you be more specific? what, exactly, are you looking for?

AI> A pkt viewer that can tell me the version of a particular pkt and tell me
AI> if it is valid pkt or not.

i have a little something that can determine the PKT version but it won't tell
you if the PKT is valid or not... that's up to the human reading the values
from the screen output...

AI> James Coyle is looking for this because we have been having trouble
AI> with some pkts and looking for a solution. I think he is trying to
AI> identify the type of pkt he has and then it can be tossed without
AI> error. It's all a little over my head but I am searching for such a
AI> thing if I can find one I think it would make his job easier.

i have code i might be able to share with him for this but it is very
simplistic... basically, it reads the PKT header into a plain blank buffer...
then there are three PKT format headers that are ""overlaid"" on that buffer,
one at a time, and that's when we look for sane data in specific fields... it
is very simple TP code...

ml>>  AI> I know of a few
ml>>
ml>> which ones?

AI> I use pktview from husky. It's all I have but it doesn't tell me the
AI> pkt version. James also has pktdump but it crashes and deletes the
AI> file. He also has inspecta but that doesn't seem to read the pkt at
AI> all.

can you send me one of those PKTs that inspecta won't read? that's really weird
for it to not read them... make sure you archive it so that my system won't try
to process it as mail...

ml>> version determination is generally very simple... you look for
ml>> certain relatively sane data in certain positions... if it doesn't
ml>> fit the definition of sane then you try with another PKT format and
ml>> look for relatively sane data again...

AI> I'm going to pass this on to him and let him know where I got it. He
AI> may have further questions for you.. I'm lost already.. :)

that'll be fine... he should be able to contact me via netmail or email...

ml>> as for anomalies, i guess that depends on what one calls an
ml>> anomaly...

AI> Something that causes the tosser to do unwanted or unexpected things
AI> especially if it disrupts the smooth flow of mail.

hahaha!

)\/(ark

Always Mount a Scratch Monkey

... Childhood isn't an age, it's a state of mind
---
* Origin:  (1:3634/12.73)