1 | initial version |
Correct, I mistakenly assumed the iwarp_mpa_tcp heuristic to properly find streams even without the handshake, when I point the iwarp_ddp dissector to a tcp session using Lua - which it doesn't (now obviously).
There seems to be a pretty old Bug 12361 where that exact same issue also caused a lot of confusion. I don't have the toolchain to make a windows binary of a fixed iwarp_mpa_tcp dissector that registers in the tcp.port dissector table (and provides a simple dissector for in-stream MPA header/CRC only). I don't know how to update that bug report. Providing the registering of the dissector (so that one can manually bind it to a specific port), and the dissector not solely relying on the conversation previously being found to be MPA (but simply assume the MPA framing and go from there) would be extremely helpful.
I guess in the meantime I have to take the c source of iwarp_mpa_tcp, recode that - excluding the heuristic - as lua dissector.
(Having the capability within Lua to tell heuristic dissectors to work on a specific packet would be good too, going forward).
Thanks, Richard
2 | No.2 Revision |
Correct, I mistakenly assumed the iwarp_mpa_tcp heuristic to properly find streams even without the handshake, when I point the iwarp_ddp dissector to a tcp session using Lua - which it doesn't (now obviously).
There seems to be a pretty old Bug 12361 where that exact same issue also caused a lot of confusion. I don't have the toolchain to make a windows binary of a fixed iwarp_mpa_tcp dissector that registers in the tcp.port dissector table (and provides a simple dissector for in-stream MPA header/CRC only). I don't know how to update that bug report. Providing the registering of the dissector (so that one can manually bind it to a specific port), and the dissector not solely relying on the conversation previously being found to be MPA (but simply assume the MPA framing and go from there) would be extremely helpful.
I guess in the meantime I have to take the c C source of iwarp_mpa_tcp, recode that - excluding the heuristic - as lua Lua dissector.
(Having the capability within Lua to tell heuristic dissectors to work on a specific packet would be good too, going forward).
Thanks, Richard
3 | No.3 Revision |
Correct, I mistakenly assumed the iwarp_mpa_tcp heuristic to properly find streams even without the handshake, when I point the iwarp_ddp dissector to a tcp session using Lua - which it doesn't (now obviously).
There seems to be a pretty old Bug 12361 12361 where that exact same issue also caused a lot of confusion. I don't have the toolchain to make a windows binary of a fixed iwarp_mpa_tcp dissector that registers in the tcp.port dissector table (and provides a simple dissector for in-stream MPA header/CRC only). I don't know how to update that bug report. Providing the registering of the dissector (so that one can manually bind it to a specific port), and the dissector not solely relying on the conversation previously being found to be MPA (but simply assume the MPA framing and go from there) would be extremely helpful.
I guess in the meantime I have to take the C source of iwarp_mpa_tcp, recode that - excluding the heuristic - as Lua dissector.
(Having the capability within Lua to tell heuristic dissectors to work on a specific packet would be good too, going forward).
Thanks, Richard