☆ YPPASSWDPROC_UPDATE相关通信报文 https://scz.617.cn/network/200604102024.txt Sniffer Pro 4.70.564、OmniPeek 3.1.1不能对"YP password update protocol"解 码,Ethereal 0.10.14正确解码如下: -------------------------------------------------------------------------- Remote Procedure Call, Type:Call XID:0x40b60257 XID: 0x40b60257 (1085669975) Message Type: Call (0) RPC Version: 2 Program: YPPASSWD (100009) Program Version: 1 Procedure: UPDATE (1) Credentials Flavor: AUTH_NULL (0) Length: 0 Verifier Flavor: AUTH_NULL (0) Length: 0 Yellow Pages Passwd Program Version: 1 V1 Procedure: UPDATE (1) oldpass: oldpass length: 7 contents: oldpass fill bytes: opaque data newpw name: scz length: 3 contents: scz fill bytes: opaque data passwd: newpass length: 7 contents: newpass fill bytes: opaque data uid: 500 gid: 500 gecos: scz length: 3 contents: scz fill bytes: opaque data dir: /export/home/scz length: 16 contents: /export/home/scz shell: /sbin/sh length: 8 contents: /sbin/sh 0020 40 b6 02 57 00 00 @..W.. 0030 00 00 00 00 00 02 00 01 86 a9 00 00 00 01 00 00 ................ 0040 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 00 00 00 07 6f 6c 64 70 61 73 73 00 00 00 ......oldpass... 0060 00 03 73 63 7a 00 00 00 00 07 6e 65 77 70 61 73 ..scz.....newpas 0070 73 00 00 00 01 f4 00 00 01 f4 00 00 00 03 73 63 s.............sc 0080 7a 00 00 00 00 10 2f 65 78 70 6f 72 74 2f 68 6f z...../export/ho 0090 6d 65 2f 73 63 7a 00 00 00 08 2f 73 62 69 6e 2f me/scz..../sbin/ 00a0 73 68 sh --------------------------------------------------------------------------