Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: Re: Re: [Ethereal-dev] ACSE

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Yuriy Sidelnikov" <YSidelnikov@xxxxxxxx>
Date: Wed, 22 Jun 2005 13:09:52 +0400
ok.
I remember about your requests.:)
I'll send you everything you need.Probably, tomorrow.
I have a lot of the capture files but I'm limited by some conditions.
Copyright,corporative ethics and so on.
So I need to choose carefully.
ronnie sahlberg wrote:
Can you send me the ASN1 for MMS and some example captures i can play with?
I would be very happy to also get captures with indefinite-length so i
can test the changes to packet-ber to support it properly.
On 6/21/05, Yuriy Sidelnikov <YSidelnikov@xxxxxxxx> wrote:
Hi,
I've tested it out.Dissector is generally working.Looks ugly as everything
no handmade but nevertheless:)
Some remarks:
1.No need to add ACSE title if this is not ACSE pdu(DATA blocks or whatever
) :
IMHO,the lines below has to be moved farther:
        if (check_col(pinfo->cinfo, COL_PROTOCOL))
                col_set_str(pinfo->cinfo, COL_PROTOCOL, "ACSE");
        if (check_col(pinfo->cinfo, COL_INFO))
                col_clear(pinfo->cinfo, COL_INFO);
I mean we have to say this is ACSE if PDU really has ACSE inside.For now we
have empty ACSE where we have no ACSE pdu at all.
For examle, FTAM data block without any ACSE pdu inside:
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE                          <--------------   really we haven't ACSE here
OSI ISO 8571 FTAM Protocol
   OCTET String
OSI ISO 8571 FTAM Protocol
   OCTET String
OSI ISO 8571 FTAM Protocol
OCTET String
2.In case of unregistered high level dissector (MMS in this example) message
[Malformed Packet: ACSE] is not what I'm expecting to see.
No.     Time        Source                Destination           Protocol
Info
     9 0.019827    204.254.125.152       192.168.1.36          ACSE
[Malformed Packet]
Frame 9 (200 bytes on wire, 200 bytes captured)
Ethernet II, Src: 00:30:a7:00:03:51 (00:30:a7:00:03:51), Dst:
00:05:32:49:f9:38 (00:05:32:49:f9:38)
Internet Protocol, Src: 204.254.125.152 (204.254.125.152), Dst: 192.168.1.36
(192.168.1.36)
Transmission Control Protocol, Src Port: tsap (102), Dst Port: 1033 (1033),
Seq: 23, Ack: 199, Len: 146
TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
   aare
       Padding: 7
       protocol-version: 80 (version1)
           1... .... = version1: True
       aSO-context-name: 1.0.9506.2.3
       result: accepted (0)
       result-source-diagnostic: acse-service-user (1)
           acse-service-user: null (0)
       user-information:
           Item
               indirect-reference: 3
               encoding: single-ASN1-type (0)
BER: Dissector for OID:1.0.9506.2.3 not implemented. Contact Ethereal
developers if you want this supported
   [9]
       [0]
[Malformed Packet: ACSE]
Talking about MMS - probably it's time to generate such dissector? Now we
have everything we need.
Regards,
Yuriy. Yuriy Sidelnikov wrote:
> Hi,
> Ok,I'll try to check new dissector ASAP.
> It will take a while.
> Yuriy.
>
> ronnie sahlberg wrote:
>
>> Hi,
>> I have just checked in a new ACSE dissector generated by ASN2ETH.
>> Please test it out and report any issues.
>>
>> _______________________________________________
>> Ethereal-dev mailing list
>> Ethereal-dev@xxxxxxxxxxxx
>> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev

_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev