"Others" protocols? 1

[CarlosVN]

Hello, what's the best way to get the Expert to display the correct names of the protocols listed as "Other"? Sniffer Pro 4.0 correctly decodes those packets ie: MS DCE/RPC, CIFS/SMB, TNS, SQL, etc. But I have to manually enter the names and port numbers under the Protocols tab in Expert Options to get the names on the Expert graphs. Normally this wouldn't be a problem, but some protocols agree to use random ports (DCE/RPC) and makes my life complicated.

Any ideas?

TIA

Carlos

 

[CarlosVN]

COrrection: I enter the protocols names in Tools -> Options -> Protocols, NOT in Expert Options. Sorry.

 

[SpenceP]

Unfortunately if your applications do not use standard port numbers still has no "decode as" functionality. You can put the trace files into a freeware program like Ethereal for this.

SpenceP

 

[scoobs]

For SQL it's easy you just put SQL under TCP and then use 1433. At least with sniffer 4.5 it is. You add the protocol stop and restart sniffer and it starts tracking the new protocals. With Exchange MS/DCE I am struggling to find a useful range. I am considering restricting the port usage on the Exchange server so I can be sure it's Exchange traffic.