Skip to content

XIPT.ECHO response packet does not include original data sent in XIPT.ECHO request #11

Open
Open
XIPT.ECHO response packet does not include original data sent in XIPT.ECHO request#11

Description

@nbriggs
nbriggs
opened on Oct 2, 2022

For example, tracing packets from NS.ECHOUSER to the example mail service:

PUT:  From 2032#145377.167022.32126#165372 to 2032#10000.135420.10401#2
Length = 34 bytes (header + 4)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 1, Data: [0][1]

GET:  From 2032#10000.135420.10401#2 to 2032#145377.167022.32126#165372
Length = 32 bytes (header + 2)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 2

PUT:  From 2032#145377.167022.32126#165372 to 2032#10000.135420.10401#2
Length = 34 bytes (header + 4)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 1, Data: [0][2]

GET:  From 2032#10000.135420.10401#2 to 2032#145377.167022.32126#165372
Length = 32 bytes (header + 2)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 2

PUT:  From 2032#145377.167022.32126#165372 to 2032#10000.135420.10401#2
Length = 34 bytes (header + 4)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 1, Data: [0][3]

GET:  From 2032#10000.135420.10401#2 to 2032#145377.167022.32126#165372
Length = 32 bytes (header + 2)
Type = 2 (\XIPT.ECHO)
Contents: Operation: 2

Expected behavior is that the response packet should contain the same data sent in the request packet, with the operation changed from request (1) to response (2).

Activity

  1. devhawala commented on Oct 3, 2022

    @devhawala
    devhawala
    on Oct 3, 2022
    Owner

    dodoserver-and-nethub.zip

    that was an embarassing error of mine (never confuse min and max :-()

    the attached zip-file contains a new dodoserver-and-nethub.jar for replacing the one in the dodo-demo directory

  2. devhawala commented on Oct 4, 2022

    @devhawala
    devhawala
    on Oct 4, 2022
    Owner

    The new version of Dodo indeed fixes the failing Echo service: according to Netspy, the payload length of the response packet is now same as in the request packet (0x22 == 34 bytes or 17 words) and the additional 16-bit word has the same content as in the request.

    Accordingly, the transcript of the NS.ECHOUSER execution in Medley improved from (old Dodo version):

    image

    to (new dodo Version):

    image

    So this fix will be in my next Dodo commit.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions