Article View: comp.protocols.ppp
Article #414Re: Snooping on PPP modem connection.
From: Ian Stirling
Date: Mon, 13 Apr 1998 00:00
Date: Mon, 13 Apr 1998 00:00
43 lines
3179 bytes
3179 bytes
Tom Bird <hamster@nospam.demon.co.uk> wrote: : Ian Stirling <00003530BE5B.NO_UCE@mauve.demon.co.uk> wrote in article : <00003530BE5B.NO_UCE@mauve.demon.co.uk>... :> Tom Bird <hamster@nospam.demon.co.uk> wrote: :> : Ian Stirling <0000352FECBD.NO_UCE@mauve.demon.co.uk> wrote in article :> : <0000352FECBD.NO_UCE@mauve.demon.co.uk>... :> :> Anyone know how to take raw bytestreams, and produce a tcpdump-like :> :> dump of the packets going over a PPP connection? Preferably without :> :> having to write a PPP stack. :> :> I'm trying to reverse engineer the protocols used to talk to an online :> :> service, so I can make a linux client. :> :> It's currently running on windows. :> :> : The easy way to do this would be to download the telnet specification :> : RFC's. :> I know how to do telnet, ... that's not the problem, I'm trying to :> work out when/where some out of band data is being sent. : Like the 'wrapper' around the packet? : e.g. #packet header# --- D A T A --- #packet end# : and you want to see inside the header and end? : Dunno how / why you'd want to do that. I want to determine how a 95 box logs into an oddball server, so I can clone it, and get a linux version of the client up and working. Hence, some of the obvious solutions, such as tcpdump, ... won't work, as they all only work on the server, which I don't have access to. I seem to have found a program which purports to do a tcpdumpalike for 95, don't know how that will work. -- Ian Stirling. Designing a linux PDA, see http://www.mauve.demon.co.uk/ ----- ******* If replying by email, check notices in header ******* ----- "The device every conquerer, yes, every altruistic liberator should be required to wear on his shield... is a little girl and her kitten, at ground zero" Sir Dominic Flandry in Poul Anderson's A Knight of Ghosts and Shadows
Technical Details
Message-ID:
<0000353265BF.NO_UCE@mauve.demon.co.uk>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<0000352FECBD.NO_UCE@mauve.demon.co.uk> <01bd65aa$f485d860$0100b51f@dbqa.demon.co.uk> <00003530BE5B.NO_UCE@mauve.demon.co.uk> <01bd6671$8f62db00$0100b51f@dbqa.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103eaf,99252ca71c35871a X-Google-Attributes: gid103eaf,public X-Google-Thread: fac57,99252ca71c35871a X-Google-Attributes: gidfac57,public From: Ian Stirling <0000353265BF.NO_UCE@mauve.demon.co.uk> Subject: Re: Snooping on PPP modem connection. Date: 1998/04/13 Message-ID: <0000353265BF.NO_UCE@mauve.demon.co.uk> X-Deja-AN: 343716703 References: <0000352FECBD.NO_UCE@mauve.demon.co.uk> <01bd65aa$f485d860$0100b51f@dbqa.demon.co.uk> <00003530BE5B.NO_UCE@mauve.demon.co.uk> <01bd6671$8f62db00$0100b51f@dbqa.demon.co.uk> X-Mail2News-User: Send.NO_UCE@mauve.demon.co.uk X-Warning0: For unsolicited commercial email, sent or causing to be sent to my email address X-Warning1: on this message, I reserve the right to levy a charge for my time and expenses X-Warning2: of up to 100 pounds sterling per message, plus legal, penalty or other costs. X-Complaints-To: abuse@demon.net X-Mail2News-Path: post-30.mail.demon.net!mauve.demon.co.uk X-Trace: mail2news.demon.co.uk 892503211 22738 Send.NO_UCE mauve.demon.co.uk Organization: None. X-Note: Anti-UCE in effect, replying should work if you are not UCE'ng User-Agent: tin/pre-1.4-971106 (UNIX) (Linux/2.0.33 (i586)) Newsgroups: comp.protocols.ppp,demon.tech.unix