Differences between revisions 2 and 3
Revision 2 as of 2006-06-05 03:19:20
Size: 1274
Editor: localhost
Comment:
Revision 3 as of 2008-04-12 17:51:25
Size: 1280
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 12: Line 12:
 * ["DCE/RPC"]: Typically, Messenger uses ["DCE/RPC"] as its transport protocol.  * [[DCE/RPC]]: Typically, Messenger uses [[DCE/RPC]] as its transport protocol.
Line 28: Line 28:
 * attachment:SampleCaptures/messenger.pcap  * [[attachment:SampleCaptures/messenger.pcap]]
Line 31: Line 31:
A complete list of Messenger display filter fields can be found in the [http://www.wireshark.org/docs/dfref/m/messenger.html display filter reference] A complete list of Messenger display filter fields can be found in the [[http://www.wireshark.org/docs/dfref/m/messenger.html|display filter reference]]

Microsoft Messenger Protocol (Messenger)

XXX - add a brief Messenger description here

History

XXX - add a brief description of Messenger history

Protocol dependencies

  • DCE/RPC: Typically, Messenger uses DCE/RPC as its transport protocol.

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).

Wireshark

The Messenger dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Wireshark features where appropriate, like special statistics of this protocol.

Preference Settings

There are no Messenger related preference settings.

Example capture file

Display Filter

A complete list of Messenger display filter fields can be found in the display filter reference

  • Show only the Messenger based traffic:

     messenger 

Capture Filter

You cannot directly filter Messenger protocols while capturing.

  • add link to Messenger specification and where to find additional info on the web about it

Discussion

Messenger (last edited 2008-04-12 17:51:25 by localhost)