# $OpenBSD: pmap-mnt.d,v 1.2 2001/01/29 01:58:11 niklas Exp $ # portmap request for mountd [or whatever; see where prog=MOUNT] # send to UDP 111 and hope it's not a logging portmapper! # split into longwords, since rpc apparently only deals with them 001 # 0x01 # . # XID: 4 trash bytes 002 # 0x02 # . 003 # 0x03 # . 004 # 0x04 # . 000 # 0x00 # . # MSG: int 0=call, 1=reply 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # pmap call body: rpc version=2 000 # 0x00 # . 000 # 0x00 # . 002 # 0x02 # . 000 # 0x00 # . # pmap call body: prog=PMAP, 100000 001 # 0x01 # . 134 # 0x86 # . 160 # 0xa0 # . 000 # 0x00 # . # pmap call body: progversion=2 000 # 0x00 # . 000 # 0x00 # . 002 # 0x02 # . 000 # 0x00 # . # pmap call body: proc=GETPORT, 3 000 # 0x00 # . 000 # 0x00 # . 003 # 0x03 # . # with AUTH_NONE, there are 4 zero integers [16 bytes] here 000 # 0x00 # . # auth junk: cb_cred: auth_unix = 1; NONE = 0 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # auth junk 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # auth junk 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # auth junk 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # prog=MOUNT, 100005 001 # 0x01 # . 134 # 0x86 # . 165 # 0xa5 # . 000 # 0x00 # . # progversion=1 000 # 0x00 # . 000 # 0x00 # . 001 # 0x01 # . 000 # 0x00 # . # protocol=udp, 17 000 # 0x00 # . 000 # 0x00 # . 017 # 0x11 # . 000 # 0x00 # . # proc num = junk 000 # 0x00 # . 000 # 0x00 # . 000 # 0x00 # . # The reply you get back contains your XID, int 1 if "accepted", and # mountd's port number at the end or 0 if not registered.