Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 7902] Improved Dissection of Modbus/TCP messages and added

Date: Mon, 22 Oct 2012 12:05:11 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7902

--- Comment #2 from Chris Bontje <cbontje@xxxxxxxxx> 2012-10-22 12:05:10 PDT ---
(In reply to comment #1)
> Created attachment 9402 [details]
> Several Modbus RTU over TCP and Modbus/TCP Capture examples

These test captures had 5 rounds of fuzz-testing ran against them, not sure if
more is usually standard:

chribont@CHRIBONTNB2 /cygdrive/c/wireshark/wireshark-gtk2
$ bash -o igncr ../tools/fuzz-test.sh /cygdrive/c/temp/captures/*
../tools/fuzz-test.sh: line 90: ulimit: cpu time: cannot modify limit: Invalid
argument
cygwin warning:
  MS-DOS style path detected: C:\cygwin\tmp
  Preferred POSIX equivalent is: /tmp
  CYGWIN environment variable option "nodosfilewarning" turns off this warning.
  Consult the user's guide for more details about POSIX paths:
    http://cygwin.com/cygwin-ug-net/using.html#using-pathnames
Running ./tshark with args: "-nVxr" "-nr" (forever)

Starting pass 1:
    C:\temp\captures\Modbus_Serial_ModFloat.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\modbus_tcp_100reg.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_di_read.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_hreg_write.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_FLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_MODFLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_Float.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_ModFloat.pcap: (-nVxr) (-nr)  OK
Starting pass 2:
    C:\temp\captures\Modbus_Serial_ModFloat.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\modbus_tcp_100reg.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_di_read.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_hreg_write.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_FLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_MODFLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_Float.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_ModFloat.pcap: (-nVxr) (-nr)  OK
Starting pass 3:
    C:\temp\captures\Modbus_Serial_ModFloat.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\modbus_tcp_100reg.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_di_read.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_hreg_write.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_FLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_MODFLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_Float.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_ModFloat.pcap: (-nVxr) (-nr)  OK
Starting pass 4:
    C:\temp\captures\Modbus_Serial_ModFloat.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\modbus_tcp_100reg.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_di_read.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_hreg_write.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_FLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_MODFLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_Float.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_ModFloat.pcap: (-nVxr) (-nr)  OK
Starting pass 5:
    C:\temp\captures\Modbus_Serial_ModFloat.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\modbus_tcp_100reg.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_di_read.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_coil_hreg_write.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_FLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_TCP_MODFLOAT.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_Float.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT16.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_INT32.pcap: (-nVxr) (-nr)  OK
    C:\temp\captures\Modbus_Tunneled_ModFloat.pcap: (-nVxr) (-nr)  OK

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.