Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 2078] New: New dissector for RTMP(T) protocol

Date: Sat, 8 Dec 2007 07:12:49 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2078

           Summary: New dissector for RTMP(T) protocol
           Product: Wireshark
           Version: unspecified
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: metatech@xxxxxxxxxxxxx


Build Information:
N/A
--
Here is a dissector for the Real Time Messaging Protocol which is used by the
Flash plug-in for the live video streaming with the Adobe Flash Communication
Server.
As a dissector for another protocol named "RTMP" already exists in Wireshark
(AppleTalk protocol) , I took an alternate name for mine (RTMPT).
Since the protocol does not have "magic" words but rather has "magic" offsets,
I added a field in the private_data passed by the TCP dissector for the "ack"
sequence number.
The RTMP protocol has been extensively reverse engineered by the Red5 project
but this dissector only has a basic subset of the protocol.
The patch is generated against trunk version of today with the diff command.
I have uploaded in the Wiki a sample of an RTMP conversation
(http://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=rtmp_sample.tgz)
and I ran more than 1100 runs of fuzz testing.
Please commit it.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.