How can I get wireshark to support an ISO 13400 filter for DoIP for DoIP versions 3 and 4?
Wireshark is great for looking at Diagnostics over IP traffic with easy filter. However, it only decodes if DoIP version is equal to 2. There are no versions 3 and 4, and these don't decode.
Can you update the question with the output of
wireshark -v
orHelp->About Wireshark:Wireshark
.Version 3 (DoIP ISO 13400-2:2019) was added in Jan 2021 - 1662: DoIP: Adding 2019 DoIP Type
Are you looking for
13400-3
or13400-4
when you say "versions 3 and 4" ?Thanks! I have wireshark Version 3.6.7 (v3.6.7-0-g4a304d7ec222) . And No, I am not looking for ISO 13400-3 or ISO 13400-4. I am looking for support for DoIP protocol (which is really captured in ISO 13400-2, but for version 4 (which is required per ISO 13400-2:2019/DAMD 1). Basically it would be ideal if the updates still decoded regardless of unknown versions. Right now, I have an implementation using protocol version 4 per amendment 1 and it doesn't decode at all.
Can you adjust the title to be
ISO 13400-2:2019/DAMD 1 DoIP Version 4
since version 3 should be working. Will also show that this is related to a standard that is Status : Under development as of 220823.Do you have a sample capture file you could share on a public file share and a link to it in the question?
The ISO documents are behind a paywall. Do you have access to the working document showing changes for the new version?