Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3318] UNS bit not correctly parsed in DNP APP Layer

Date: Wed, 26 Aug 2009 04:52:07 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3318


Rob Casey <robc@xxxxxxxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #3573|                            |review_for_checkin?
               Flag|                            |
         AssignedTo|wireshark-bugs@xxxxxxxxxxxxx|robc@xxxxxxxxxxxxxxxxx
             Status|NEW                         |ASSIGNED




--- Comment #2 from Rob Casey <robc@xxxxxxxxxxxxxxxxx>  2009-08-26 04:52:06 PDT ---
Created an attachment (id=3573)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=3573)
Patch to correct parsing of DNP3 application control octet

Confirmed that current parsing of DNP3 application control octet ignores
unsolicited bit as described in DNP3Spec-V2-Part1-ApplicationLayer-20071215 and
initial bug report.  

>From this DNP3 specification document:

The application control octet provides information needed to construct and
reassemble multiple fragment messages and to indicate whether the receiver’s
Application Layer must return an Application Layer confirmation message. It
also provides information to assist in duplicate message detection.
The bits in an application control octet form five fields.
Bit #
7 - FIR
6 - FIN
5 - CON
4 - UNS
3 >
2 > 
1 >
0 > SEQ

Attached patch corrects parsing of application control octet and adds
dnp3.al.uns as permissible filter for matching of unsolicited DNP3 messages
only.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.