CODEWITHSUNDEEP
luanetwork-protocolswireshark
Trevor
Trevor

Reputation: 1988

examples of protocols using UDP initially followed by TCP

Hey SO,
What examples do you know - of protocols initially "handshaking" in UDP, then "conversing" in TCP.
I know there are heaps, I just can't seem to think of any right now.

Specifically, I'm trying to write a Wireshark dissector - for this kind of protocol. So being able to peek on a similar dissector, seems like a good start.
Would love to hear if you've ever written a stateful Wireshark dissector in LUA.

Upvotes: 1

Views: 760

Answers (4)

shomeax
shomeax

Reputation: 865

I've added some kind of statefulness for the HTTP protocol within my project aimed to lookup original HTTP request for given HTTP response.

Generally speaking, Lua has nice notion of closures which can be used as kind of static global variables for holding handshakes and whatever other references.

Upvotes: 0

Andrew
Andrew

Reputation: 11

One example is SIP/Fax. SIP/SDP setups the session for fax transmission, and then transfers fax/image via TCP/TPKT.

Upvotes: 1

Jakob Bowyer
Jakob Bowyer

Reputation: 34688

Surely a handshake would be in TCP being a stateful connection? A handshake seems like something that would want to be ordered, compared to UDP where there is stateless transmission?

Upvotes: 0

user600838
user600838

Reputation:

There are several that use both UDP and TCP (see Apple's list, marked as TCP/UDP), but I don't know if they behave exactly as you've described (initial handshake with UDP). DNS and NFS are a couple examples.

I've written Wireshark dissectors in Lua, but not stateful ones.

Upvotes: 0

Related Questions