Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] RFC 2508 Dissector

From: Donald White <donald_white@xxxxxxxxx>
Date: Sun, 25 Mar 2007 20:36:35 -0700
Between August and October of 2006, I submitted three patches for packet-ppp.c. These corrected problems I had encountered in researching a problem for my employer. This problem involved RFC 2508 protocol between two routers.

In resolving this problem, I developed a partial RFC 2508 dissector which I added to packet-ppp.c. The code is attached.

I say partial because I am unsure that I dissected all the packets described in the RFC. I had a single capture file and restricted myself to packets for which I had examples. The dissector works for 0x61, 0x67, 0x2065 and 0x2067 packets. The capture I had only included IPv4 and UDP so the dissector does not consider IPv6 or TCP although RFC 2508 may cover these protocols also.

Since the work I did resulted in the resolution of the problem, I will receive no further captures and be given no more time to complete the dissector.

Thus, I submit it to the list in its current state. I cannot even provide the capture from which I worked as test data. I am willing to do further development if someone can provide further examples of packets from this protocol.

Don

Attachment: packet-ppp.patch.gz
Description: GNU Zip compressed data