Differences between revisions 2 and 3
Revision 2 as of 2006-10-10 17:26:05
Size: 1427
Editor: GuyHarris
Comment: Clean up.
Revision 3 as of 2006-10-10 17:26:59
Size: 1412
Editor: GuyHarris
Comment: More tweaks.
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
The quote of the day protocol allows a client to get a random quote from a server. The qod protocol allows a client to get a random quote from a server.
Line 35: Line 35:
You cannot directly filter qod protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one. You cannot directly filter qod traffic while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.

Quote of the day (qod)

The qod protocol allows a client to get a random quote from a server.

History

The protocol is as old as TCP and is part of the basic protocols.

Protocol dependencies

  • ["TCP"]: Qod uses ["TCP"] as its transport protocol. The TCP port for qod traffic is 17.

Example traffic

Do'h - Homer Simpson

Wireshark

No qod dissector exists; the protocol is raw text without any formatting or commands.

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

  • attachment:SampleCaptures/qod.pcap

Display Filter

A complete list of qod display filter fields can be found in the [http://www.wireshark.org/docs/dfref/q/qod.html display filter reference]

  • Show only the qod based traffic:

     qod 

Capture Filter

You cannot directly filter qod traffic while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.

  • Capture only the qod traffic over the default port (17):

     tcp port 17 

Discussion

QuoteOfTheDayProtocol (last edited 2008-04-12 17:51:39 by localhost)