[Bug 649572] New: tcpdump shows wrong udp port
https://bugzilla.novell.com/show_bug.cgi?id=649572 https://bugzilla.novell.com/show_bug.cgi?id=649572#c0 Summary: tcpdump shows wrong udp port Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: koenig@linux.de QAContact: qa@suse.de Found By: --- Blocker: --- Created an attachment (id=397315) --> (http://bugzilla.novell.com/attachment.cgi?id=397315) tcpdump file tcpdump shows bogus port for udp nfs traffic: $ tcpdump -n -r nfs.udp.tcpdump 11:24:57.606800 IP 10.0.5.44.64393 > 10.10.8.29.111: UDP, length 56 11:24:57.607093 IP 10.10.8.29.111 > 10.0.5.44.64393: UDP, length 28 11:24:57.607281 IP 10.0.5.44.1288610579 > 10.10.8.29.2049: 40 null ^^^^^^^^^^ 11:24:57.607325 IP 10.10.8.29.2049 > 10.0.5.44.1288610579: reply ok 24 null ^^^^^^^^^^ the correct port # is 64393, as wireshark shows (offset 0x22 in packet). that magic number 1288610579 is the RPC Call XID (from wireshare, offset 0x2a in packet). I've tested tcpdump in suse 11.1 64bit and suse 9.0 32bit(!) -- all show the same bogus port numbers :-(( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=649572
https://bugzilla.novell.com/show_bug.cgi?id=649572#c1
Harald Koenig
the correct port # is 64393, as wireshark shows (offset 0x22 in packet). that magic number 1288610579 is the RPC Call XID (from wireshare, offset 0x2a in packet).
a dear colleague pointed me to the "RTFM tcpdump" : NFS Requests and Replies Sun NFS (Network File System) requests and replies are printed as: src.xid > dst.nfs: len op args src.nfs > dst.xid: reply stat len op results so this all works as designed and documented! ticket closed -- sorry for the noise! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com