WHOIS is a plain text protocol, why not decode it.

[tcpdump] / tcp.h

diff --git a/tcp.h b/tcp.h
index 912b5e820ca6de542d51b4f5ba0f90086eb40188..d9ffd0df28581fa41bd9dd40ffc8bb2fc3fcd004 100644 (file)
--- a/tcp.h
+++ b/tcp.h
@@ -104,6 +104,9 @@ struct tcphdr {
 #ifndef SMTP_PORT
 #define SMTP_PORT              25
 #endif
+#ifndef WHOIS_PORT
+#define WHOIS_PORT             43
+#endif
 #ifndef NAMESERVER_PORT
 #define NAMESERVER_PORT                53
 #endif