Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-dev: Re: [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Martin Mathieson" <martin.r.mathieson@xxxxxxxxxxxxxx>
Date: Fri, 7 Sep 2007 10:20:51 +0100

On 9/7/07, Wen Cheng <wencheng@xxxxxxxxx> wrote:
> Hi all,
>
> Great job Stephen. I'm a wimax tester, I really like your tool. But I think
> the display pattern of TLVs is not very good from a tester point of view.
> May I help to do some improvment work?
>

This dissector has already been useful to us, thanks again for posting it.

Wen - in case you didn't see them, here as some comments I made in
bugzilla (http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1811)
while the patch was under review.  These maybe don't relate to the
display pattern, but are changes I hope to make in the coming weeks.

Regards,
Martin

"Here are a few quick comments:
(1) some of the tlv definitions don't match in all cases what I see in my
example captures (I'm sure these can be resolved as the spec settles down -
I'll ask someone who has been involved with such things to look at this next
week)

(2) I'd probably add more expert items to report more things like:
    - length fields not being consistent with that implied by type of TLV
    - unknown tlv codes

(3) I notice that the field of the tlv parent is wimaxasncp.tlv_type.  I'd
rather it were just a byte-string field, e.g. wimaxasncp.tlv, then maybe have
the child nodes be e,g, wimaxasncp.tlv.length, etc.  This is probably just a
matter of taste.  There are some other little prettifications that I'd want to
make.

<snip>

(5) Its not possible to set a filter to do a comparison with the value of a
certain tlv, e.g. you can't do 'wimaxasncp.avp.ms_nai == "base_station_w3"

<snip>

Points (1), (3) and (5) remind me strongly of Diameter dissector issues, and I
wonder if this dissector should (eventually) be done in a similar way, i.e.
- read the tlv definitions in from one or more XML files at run-time
- dynamically register filters such as described in (5)
"

  • Follow-Ups:
    • Re: [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?
      • From: Stephen Croll
  • References:
    • [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?
      • From: Stephen Croll
    • Re: [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?
      • From: Wen Cheng
  • Prev by Date: Re: [Wireshark-dev] Windows 2K build problems
  • Next by Date: Re: [Wireshark-dev] [Wireshark-users] Unable to compile static build of TShark on Fedora 7
  • Previous by thread: Re: [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?
  • Next by thread: Re: [Wireshark-dev] WiMAX ASN Control Protocol dissector submission status?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation