I review the trace using the cvs version of ethereal and the ninth packet is decoded as TELNET.
What version are you running? Jeff Foster -----Original Message----- From: Yaniv Kaul [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 11, 2004 10:12 AM To: Ethereal ' Subject: [Ethereal-dev] bug in socks - displays version '255' in the first SOCKS tunnelled Telnet It seems that the SOCKS parser is parsing the first byte of the telnet connection, which by chance is 0xFF (a telnet option), and thinks its the version number of SOCKS... Please see attached dump, packet 9. *** The information in this email is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this email in error please notify the sender by return e-mail, delete this email, and refrain from any disclosure or action based on the information. **** _______________________________________________ Ethereal-dev mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-dev
