Index_D

---

D

DARPA (Defense Advanced Research Projects Agency), 18

data link layer, Open Systems Interconnection (OSI) model, 17

Data View Window

defined, 47, 128

illustrated, 133, 134

overview, 132–134

pop-up menu, 200

using with Protocol Tree Window, 133

DBS Etherwatch, 44, 305

DCS100 network analyzer, 11–14

debian directory, 388

decnet keyword, 214, 217

Decode As dialog box, 177–179

decodes, as network analyzer component, 4

Defense Advanced Research Projects Agency (DARPA), 18

denial of service (DoS) attacks, 16

Department of Defense, 18

dependencies, 81–82, 99, 100–101, 102, 103, 104, 108, 109–114

developer kits, 383–386

developer mailing list, 381

Digital Equipment Corporation, 214, 217

directories, 388–392

directory path, 124

discovery. See scanning

Display Filter dialog box, 251

display-filter fields

address, 230, 237–239

boolean, 230, 233–234

byte sequence, 230, 236–237, 241, 242–243

expressions in, 229–249

floating point, 230, 234

frame-number, 230, 233

glossary of names, 248–249

hidden, 247

integer, 230, 231–233

list of field types, 230

list of operators, 230–231

and logical operations, 244

logical operators in, 244

multiple protocol occurrences, 244–246

overview, 229

ranges, 241–243

ranges functionality, 241–243

string, 230, 234–236

time, 230, 239–240

display filters

adding to list in Display Filter dialog box, 252

vs. capture filters, 48, 206, 208–209, 260

constructing in Filter Expression dialog box, 254–256

deleting from list in Display Filter dialog box, 253

exchanging with others, 254

Internet Protocol, 49–50

language manual, 209

overview, 48–49

saving, 252, 253, 259

vs. tcpdump filters, 227

user interface, 249–254

using to select packets, 246

writing, 227–256, 258

Display Options dialog box, 155–156

dissector_add function, 434

dissectors

and bitfields, 415–417

considerations, 413–424

and conversations, 418–419

copying templates, 393–395

creating, 401–408

creating sub-trees, 413–415

defining include files, 395–397

developing, 392–412, 432

displaying data in decode, 408

how they work, 410–412

list of plugins, 391

naming, 392

and packet fragmentation, 422, 433

and packet retransmissions, 419–420, 433

passing data between, 420–421

passing on payloads, 408–409

as plug-ins, 429, 434

registering, 397–400

role in Ethernet history, 41–42

running, 409–410

saving preference settings, 421–422

and unicode strings, 417–418

DNS (Domain Name System)

asynchronous-capable, 77

lookups, 29, 205

reverse lookups, 139

and TCP, 19

and UDP, 19

doc directory, 388–389

DoD (Department of Defense) model, 18

Domain Name System (DNS)

asynchronous-capable, 77

lookups, 29, 205

reverse lookups, 139

and TCP, 19

and UDP, 19

DoS (denial of service) attacks, 16

downloading Ethereal, 75, 126–127, 203

Dsniff, 10, 25, 78

Dynamic Host Configuration Protocol (DHCP), 19

---