Ask Your Question

marko-hrastovec's profile - activity

2020-05-19 05:11:23 +0000 commented answer Dissector that decodes payload on another layer

I got information that users who sent that traffic sample are migrating from MAC/LLC to UDP. Until then they will compil

2020-05-17 19:23:13 +0000 commented answer Dissector that decodes payload on another layer

Thanks. First, I need to get more information about the traffic. If I understand LLC correctly, DSAP is the identifier f

2020-05-17 06:25:30 +0000 marked best answer Dissector that decodes payload on another layer

Hi,

the dissector for ASTERIX packet-asterix.c in Wireshark dissects data that is sent via network. Until now, we have only seen these data sent over UDP and that is how the dissector works. There is a line in the dissector

dissector_add_uint_with_preference ("udp.port", ASTERIX_PORT, asterix_handle);

that defines that data is sent via UDP and dissector dissects it.

Now, I got a request to decode the same data being sent over MAC/LLC. The data are the same only the way, how they are sent is different.

How can I make the dissector to be able to decode also the MAC/LLC payload, too? All data dissecting code should stay the same. I guess I need to add something like this:

dissector_add_uint_with_preference ("llc.dsap", ???, asterix_handle);

but that is surely not enough, and I don't know how can that be done. I tried to add dissector_add similar to the one shown and some more stuff, but all I got was core dump at Wireshark start. I got some sample traffic for debugging, now I need to make Wireshark to decode it. S sample of a similar decoder, where I could see how that should be done, would be a perfect guidance.

Regards Marko

2020-05-17 06:25:30 +0000 received badge  Scholar (source)
2020-05-17 06:25:22 +0000 commented answer Dissector that decodes payload on another layer

Thanks! I will try to add it to packet-llc.c.

2020-05-16 06:54:18 +0000 commented answer Dissector that decodes payload on another layer

Would it be possible to add asterix dissecting to packet-llc.c and submit it like that to Wireshark?

2020-05-16 06:24:14 +0000 commented answer Dissector that decodes payload on another layer

Thanks. I have tried it and it works. However, I guess I cannot submit a change like that, because it messes up other de

2020-05-15 10:48:00 +0000 edited question Dissector that decodes payload on another layer

Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da

2020-05-15 08:53:45 +0000 edited question Dissector that decodes payload on another layer

Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da

2020-05-15 07:15:25 +0000 edited question Dissector that decodes payload on another layer

Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da

2020-05-15 07:14:56 +0000 received badge  Editor (source)
2020-05-15 07:14:56 +0000 edited question Dissector that decodes payload on another layer

Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da

2020-05-15 07:13:15 +0000 commented question Dissector that decodes payload on another layer

The sample traffic is here https://drive.google.com/file/d/1JR-22uOHNAoSEV8MuKFr58kXihk9TLdk/view?usp=sharing. The data

2020-05-15 06:35:56 +0000 asked a question Dissector that decodes payload on another layer

Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da