2021-11-26 00:56:20 +0000 | received badge | ● Popular Question (source) |
2020-05-19 05:11:23 +0000 | commented answer | Dissector that decodes payload on another layer I got information that users who sent that traffic sample are migrating from MAC/LLC to UDP. Until then they will compil |
2020-05-17 19:23:13 +0000 | commented answer | Dissector that decodes payload on another layer Thanks. First, I need to get more information about the traffic. If I understand LLC correctly, DSAP is the identifier f |
2020-05-17 06:25:30 +0000 | marked best answer | Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects data that is sent via network. Until now, we have only seen these data sent over UDP and that is how the dissector works. There is a line in the dissector dissector_add_uint_with_preference ("udp.port", ASTERIX_PORT, asterix_handle); that defines that data is sent via UDP and dissector dissects it. Now, I got a request to decode the same data being sent over MAC/LLC. The data are the same only the way, how they are sent is different. How can I make the dissector to be able to decode also the MAC/LLC payload, too? All data dissecting code should stay the same. I guess I need to add something like this: dissector_add_uint_with_preference ("llc.dsap", ???, asterix_handle); but that is surely not enough, and I don't know how can that be done. I tried to add dissector_add similar to the one shown and some more stuff, but all I got was core dump at Wireshark start. I got some sample traffic for debugging, now I need to make Wireshark to decode it. S sample of a similar decoder, where I could see how that should be done, would be a perfect guidance. Regards Marko |
2020-05-17 06:25:30 +0000 | received badge | ● Scholar (source) |
2020-05-17 06:25:22 +0000 | commented answer | Dissector that decodes payload on another layer Thanks! I will try to add it to packet-llc.c. |
2020-05-16 06:54:18 +0000 | commented answer | Dissector that decodes payload on another layer Would it be possible to add asterix dissecting to packet-llc.c and submit it like that to Wireshark? |
2020-05-16 06:24:14 +0000 | commented answer | Dissector that decodes payload on another layer Thanks. I have tried it and it works. However, I guess I cannot submit a change like that, because it messes up other de |
2020-05-15 10:48:00 +0000 | edited question | Dissector that decodes payload on another layer Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da |
2020-05-15 08:53:45 +0000 | edited question | Dissector that decodes payload on another layer Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da |
2020-05-15 07:15:25 +0000 | edited question | Dissector that decodes payload on another layer Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da |
2020-05-15 07:14:56 +0000 | received badge | ● Editor (source) |
2020-05-15 07:14:56 +0000 | edited question | Dissector that decodes payload on another layer Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da |
2020-05-15 07:13:15 +0000 | commented question | Dissector that decodes payload on another layer The sample traffic is here https://drive.google.com/file/d/1JR-22uOHNAoSEV8MuKFr58kXihk9TLdk/view?usp=sharing. The data |
2020-05-15 06:35:56 +0000 | asked a question | Dissector that decodes payload on another layer Dissector that decodes payload on another layer Hi, the dissector for ASTERIX packet-asterix.c in Wireshark dissects da |