What does it mean with protocol pass with clear text?

volcanoes2001 · 09-05-2009, 02:14 AM

What does it mean with protocol pass with clear text?

i captured a trace with wireshark and some results like,

let's say for DNS, it shows "standard query response A 216.246.14.25" or "standard query A www.ponjmp.com".

or for NBNS "Name query NB EDO<00>" or for NBSS "session request, to 192(20) from EDWIN<00>"

Are those clear text??

Suncoast · 09-05-2009, 10:51 PM

The title "protocol pass with clear text" means there is traffic going through, such as telnet or FTP, that is using an authentication method that is not encrypted. That's why telnet and ftp have replaced by SSH and SFTP.

The other traffic you mention is not password traffic. However some DNS traffic does use DNSSec to verify DNS traffic, which newer versions of Wireshark may be aware of.

I would kindly suggest you read the TSF forum rules before you ask any more questions on this subject.

I have replied with very general information, as more specific information would be a violation of the rules here.

09-05-2009, 02:14 AM	#1 (permalink)
volcanoes2001 Registered User Join Date: Sep 2009 Posts: 3 OS: Mac OSX 10.5.8	What does it mean with protocol pass with clear text? What does it mean with protocol pass with clear text? i captured a trace with wireshark and some results like, let's say for DNS, it shows "standard query response A 216.246.14.25" or "standard query A www.ponjmp.com". or for NBNS "Name query NB EDO<00>" or for NBSS "session request, to 192(20) from EDWIN<00>" Are those clear text??

09-05-2009, 10:51 PM	#2 (permalink)
Suncoast Registered User Join Date: Jul 2009 Location: Largo, FL, USA Posts: 389 OS: XPP, Linux, 2003, Cisco	Re: What does it mean with protocol pass with clear text? The title "protocol pass with clear text" means there is traffic going through, such as telnet or FTP, that is using an authentication method that is not encrypted. That's why telnet and ftp have replaced by SSH and SFTP. The other traffic you mention is not password traffic. However some DNS traffic does use DNSSec to verify DNS traffic, which newer versions of Wireshark may be aware of. I would kindly suggest you read the TSF forum rules before you ask any more questions on this subject. I have replied with very general information, as more specific information would be a violation of the rules here.