This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 1 and 5 (spanning 4 versions)
Revision 1 as of 2005-03-31 15:09:01
Size: 1428
Editor: UlfLamping
Comment: first content
Revision 5 as of 2008-04-12 17:51:34
Size: 1656
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
The Mailslot protocol is part of the ["SMB"] protocol family. The Mailslot protocol is part of the [[SMB]] protocol family.
Line 6: Line 6:
XXX - add a brief Mailslot description here A mailslot is a (temporary) RAM-based file to which numerous records of data can be written and read by several computers on the same network (i.e., domain). See http://msdn2.microsoft.com/en-us/library/aa365130.aspx for details on the Microsoft Developer Network.
Line 14: Line 14:
 * ["SMB"]: Typically, Mailslot uses ["SMB"] as its transport protocol.  * [[SMB]]: Typically, Mailslot uses [[SMB]] as its transport protocol.
Line 18: Line 18:
XXX - Add example traffic here (as plain text or Ethereal screenshot). XXX - Add example traffic here (as plain text or Wireshark screenshot).
Line 20: Line 20:
== Ethereal == == Wireshark ==
Line 22: Line 22:
The Mailslot dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol. The Mailslot dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.
Line 30: Line 30:
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically. XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.
Line 33: Line 33:
A complete list of Mailslot display filter fields can be found in the [http://www.ethereal.com/docs/dfref/m/mailslot.html display filter reference] A complete list of Mailslot display filter fields can be found in the [[http://www.wireshark.org/docs/dfref/m/mailslot.html|display filter reference]]
Line 44: Line 44:
 * see ["SMB"] page for further information  * see [[SMB]] page for further information

SMB MailSlot Protocol (Mailslot)

The Mailslot protocol is part of the SMB protocol family.

A mailslot is a (temporary) RAM-based file to which numerous records of data can be written and read by several computers on the same network (i.e., domain). See http://msdn2.microsoft.com/en-us/library/aa365130.aspx for details on the Microsoft Developer Network.

History

XXX - add a brief description of Mailslot history

Protocol dependencies

  • SMB: Typically, Mailslot uses SMB as its transport protocol.

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).

Wireshark

The Mailslot dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.

Preference Settings

There are no Mailslot specific preference settings.

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of Mailslot display filter fields can be found in the display filter reference

  • Show only the Mailslot based traffic:

     mailslot 

Capture Filter

You cannot directly filter Mailslot protocols while capturing.

  • see SMB page for further information

Discussion

Mailslot (last edited 2008-04-12 17:51:34 by localhost)