How to find specific databyte in CIP PCCC protocol?

asked 2022-06-21 13:39:38 +0000

wshvw
1

Hi, I need to check if some network slave has generated an error by analysing a WireShark .pcapng logfile. I need to find if the first byte of a PCCC command data unequals value 0x10. Is this possible?

edit retag flag offensive close merge delete

Comments

Do you have a capture file you could share on a public file share and add a link to it here?

Chuckc ( 2022-06-21 21:04:05 +0000 )edit

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2022-06-23 01:36:54 +0000

Chuckc
2858 ●5 ●569 ●19

S4x15 - Digital Bond's S4 conference 2015
Capture file MicroLogix56.pcap 10M MicroLogix has cip.pccc fields.

The first byte of PCCC Command Data is cip.pccc.cmd.code.
Display filter: cip.pccc.cmd.code != 0x10

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2022-06-21 13:39:38 +0000

Seen: 410 times

Last updated: Jun 23 '22

Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.

How to find specific databyte in CIP PCCC protocol? edit