A smart UDP protocol analyzer?

Posted by ripper234 on Stack Overflow See other posts from Stack Overflow or by ripper234
Published on 2010-06-02T18:27:56Z Indexed on 2010/06/03 13:54 UTC
Read the original article Hit count: 248

Filed under:

udp

|

network-protocols

|

sniffing

Is there a "smart" UDP protocol analyzer that can help me reverse engineer a message based protocol?

I'm using Wireshark to do the sniffing, but if there's a tool that can detect regularities in the protocol (repeated strings, bits of the protocol that are CRC/Checksum or length, ...) and aid the process that would help.

© Stack Overflow or respective owner

Related posts about udp

Forwarding udp ports iptables packets "lost"?

as seen on Server Fault - Search for 'Server Fault'
I have a Linux router (Debian 6.x) where i forward some ports to internal services. Some tcp ports (like 80, 22...) are OK. I have one Application listening on port 54277udp. No return is coming from this app, i only get Data on this port. Router: cat /proc/sys/net/ipv4/conf/all/rp_filter = 1 cat… >>> More
Why can blocked IPs get through my iptables? What's wrong with this configuration?

as seen on Server Fault - Search for 'Server Fault'
(Why can/How are) blocked IPs (get/getting) through my iptables? Hello and thanks for your consideration... I have configured iptables and included (below) output from the command "iptables --line-numbers -n -L" yet IP addresses (like 31.41.219.180) from IP blocks I have already blocked are getting… >>> More
iptables rules keep showing up

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I just installed an ubuntu precise server, after a few weird communications issues I checked the iptables list and found: Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere… >>> More
if I put accept all 0.0.0.0/0 means this server is totally open for any ip ?

as seen on Server Fault - Search for 'Server Fault'
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 is this means allow all ip from all port? but I still can not visit the server except I go through the allowed ip address and if I put this line in any line, did I make this server totally open for any connection? the full iptable list is below Chain… >>> More
Is there a way to receive receive data as unsugned char over UDP on QT

as seen on Stack Overflow - Search for 'Stack Overflow'
I need to send floating point numbers using UDP connection to a QT application. Now in QT the only function available is qint64 readDatagram ( char * data, qint64 maxSize, QHostAddress * address = 0, quint16 * port = 0 ) which accepts data in the form of signed character buffer. I can convert… >>> More

Related posts about network-protocols

How to design network protocols

as seen on Programmers - Search for 'Programmers'
As a programmer, you work on your software design skills. You learn about things such as modularity and reusability and how you can achieve them in code. There's plenty of literature on the subject and engineers talk about it all the time. What about if you want to design network protocols? How… >>> More
Ethernet switch capacity question

as seen on Server Fault - Search for 'Server Fault'
We're looking at hooking up 48 small embedded systems with 10/100 Ethernet ports to an Ethernet switch and then have that switch talk to a server upstream via a faster connection. I have a couple of questions about that scenario: What kind of upstream connection is best (fiber, other?) Would it… >>> More
Request time out error

as seen on Server Fault - Search for 'Server Fault'
Hi Today i came across strange problem whenever i try to pinging to my server works properly but whenever i send http request from browser the request time out happens. can anybody help me to resolve this issue. >>> More
"entering link in browser" to "finding route to host" how it works?

as seen on Server Fault - Search for 'Server Fault'
Hi, Is there a wiki or book, which explains what happens when user enters a link in the browser, and how the dns is resolved, how the router finds the route to the host etc.. I am mainly interested in routing the packets. Thank you >>> More
Tor over IPSEC or IPSEC over Tor?

as seen on Super User - Search for 'Super User'
Do you think Tor should be run over IPsec, or IPsec over Tor? Please be specific as of why you made this decision. Thanks >>> More