Differences between revisions 7 and 8
Revision 7 as of 2004-10-25 03:50:34
Size: 2864
Editor: 221
Revision 8 as of 2004-10-25 05:10:25
Size: 1863
Editor: UlfLamping
Deletions are marked like this. Additions are marked like this.
Line 54: Line 54:
[http://www.etoo.cn/21win-win 拓展训练]
[http://www.paite.net 尖锐湿疣]
[http://www.paite.net/1 尖锐湿疣]
[http://www.paite.net/default.asp 尖锐湿疣]
[http://www.paite.net/qyjj.html 尖锐湿疣]
[http://www.paite.net/cpjs.html 尖锐湿疣]
[http://www.paite.net/zjxx.html 尖锐湿疣]
[http://www.paite.net/gmzn.html 尖锐湿疣]
[http://www.paite.net/zsxx.html 尖锐湿疣]
[http://www.paite.net/yhfk.html 尖锐湿疣]
[http://www.wjmgy.com 脉管炎]
[http://www.wjmgy.com/1 脉管炎]
[http://www.wjmgy.com/hospitaljs.htm 脉管炎]
[http://www.wjmgy.com/zhuankejs.htm 脉管炎]
[http://www.wjmgy.com/zhuzhiys.htm 脉管炎]
[http://www.wjmgy.com/conact.htm 脉管炎]

User Datagram Protocol (UDP)

The ["UDP"] layer provides datagram based connectionless transport layer (layer 4) functionality in the InternetProtocolFamily.

UDP is only a thin layer and provides not much more than the described UDP port multiplexing.

Just like ["IP"], UDP also doesn't provide any mechanism to detect PacketLoss, DuplicatePackets and alike.

There are a lot of protocols on top of UDP, including: ["BOOTP"], ["DNS"], ["NTP"], ["SNMP"], ...


XXX - add a brief description of UDP history

Protocol dependencies

  • ["IP"]: Typically, UDP uses ["IP"] as its underlying protocol. The assigned protocol number for UDP on IP is 17.

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).


The UDP dissector is fully functional.

There are two statistical menu items for UDP available: Statistics/Endpoints which contains a tab showing all UDP endpoints (combination of IP address and UDP port) and Statistics/Conversations, which contains a tab showing all UDP conversations (combination of two endpoints).

Preference Settings

(XXX add links to preference settings affecting how UDP is dissected).

Example capture file

XXX - Add a simple example capture file. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

Display Filter

A complete list of UDP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/u/udp.html display filter reference]

  • Show only the UDP based traffic:


Capture Filter

  • Capture only the UDP based traffic:



User_Datagram_Protocol (last edited 2011-07-24 15:08:04 by LorenKellogg)