Wireshark · Ethereal-dev: Re: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (and X.400dissectors)-> BER CHOICE PROBLEM

Ethereal-dev: Re: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (and X.400dissectors)-> BER

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Yuriy Sidelnikov" <YSidelnikov@xxxxxxxx>

Date: Tue, 06 Sep 2005 10:41:45 +0400

Hi,
just for information - how asn2eth generated ftam dissector used to work.
Probably with old version of asn1 part ?

Initiate response/request looks the same but others pdus look much betterin old dissector(for example, SVN-14788):No. Time Source Destination ProtocolInfo1 0.000000 10.0.80.140 10.0.10.14 FTAMf-initialize-request:

Frame 1 (373 bytes on wire, 373 bytes captured)

Ethernet II, Src: 00:02:b3:26:a3:5f (00:02:b3:26:a3:5f), Dst:08:00:20:23:33:ad (08:00:20:23:33:ad)Internet Protocol, Src: 10.0.80.140 (10.0.80.140), Dst: 10.0.10.14(10.0.10.14)Transmission Control Protocol, Src Port: 4261 (4261), Dst Port: tsap (102),Seq: 0, Ack: 0, Len: 319

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
  fTAM-Regime-PDU: f-initialize-request (0)
      f-initialize-request
          Padding: 7
          protocol-Version: 80 (version-1)
              1... .... = version-1: True
              .0.. .... = version-2: False

implementation-information: ISO/IEC ISP 10607-1/2/3/6 & corresp.ENs; UK-GOSIP 4; NBS-Phase2; CS: 8.23

          presentation-tontext-management: False
          Padding: 3
          service-class: 20, transfer-class)
              0... .... = unconstrained-class: False
              .0.. .... = management-class: False
              ..1. .... = transfer-class: True
              ...0 .... = transfer-and-management-class: False
              .... 0... = access-class: False
          Padding: 5

functional-units: 3500 (read, write, limited-file-management,grouping)

              ..1. .... = read: True
              ...1 .... = write: True
              .... 0... = file-access: False
              .... .1.. = limited-file-management: True
              .... ..0. = enhanced-file-management: False
              .... ...1 = grouping: True
              0... .... = fadu-locking: False
              .0.. .... = recovery: False
              ..0. .... = restart-data-transfer: False
              ...0 .... = limited-filestore-management: False
              .... 0... = enhanced-filestore-management: False
              .... .0.. = object-manipulation: False
              .... ..0. = group-manipulation: False
              .... ...0 = consecutive-access: False
              0... .... = concurrent-access: False
          Padding: 5
          attribute-groups: C0 (storage, security)
              1... .... = storage: True
              .1.. .... = security: True
              ..0. .... = private: False
              ...0 .... = extension: False
          ftam-quality-of-Service: no-recovery (0)
          contents-type-list:
              Item: document-type-name (14)
                  document-type-name: 1.3.14.5.5.9
          initiator-identity: XXX
          filestore-password: graphicString (0)
              graphicString: YYYYYYYY

checkpoint-window: 1No. Time Source Destination ProtocolInfo2 0.227811 10.0.10.14 10.0.80.140 FTAMf-initialize-response:

Frame 2 (256 bytes on wire, 256 bytes captured)

Ethernet II, Src: 08:00:20:23:33:ad (08:00:20:23:33:ad), Dst:00:02:b3:26:a3:5f (00:02:b3:26:a3:5f)Internet Protocol, Src: 10.0.10.14 (10.0.10.14), Dst: 10.0.80.140(10.0.80.140)Transmission Control Protocol, Src Port: tsap (102), Dst Port: 4261 (4261),Seq: 0, Ack: 319, Len: 202

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
  fTAM-Regime-PDU: f-initialize-response (1)
      f-initialize-response
          state-result: success (0)
          action-result: success (0)
          Padding: 7
          protocol-Version: 80 (version-1)
              1... .... = version-1: True
              .0.. .... = version-2: False
          implementation-information: (c)Sun Microsystems; Rel 8.0.2
          Padding: 3
          service-class: 20, transfer-class)
              0... .... = unconstrained-class: False
              .0.. .... = management-class: False
              ..1. .... = transfer-class: True
              ...0 .... = transfer-and-management-class: False
              .... 0... = access-class: False
          Padding: 5

functional-units: 3500 (read, write, limited-file-management,grouping)

              ..1. .... = read: True
              ...1 .... = write: True
              .... 0... = file-access: False
              .... .1.. = limited-file-management: True
              .... ..0. = enhanced-file-management: False
              .... ...1 = grouping: True
              0... .... = fadu-locking: False
              .0.. .... = recovery: False
              ..0. .... = restart-data-transfer: False
              ...0 .... = limited-filestore-management: False
              .... 0... = enhanced-filestore-management: False
              .... .0.. = object-manipulation: False
              .... ..0. = group-manipulation: False
              .... ...0 = consecutive-access: False
              0... .... = concurrent-access: False
          Padding: 5
          attribute-groups: 80 (storage)
              1... .... = storage: True
              .0.. .... = security: False
              ..0. .... = private: False
              ...0 .... = extension: False
          ftam-quality-of-Service: no-recovery (0)
          contents-type-list:
              Item: document-type-name (14)
                  document-type-name: 1.3.14.5.5.9

checkpoint-window: 1No. Time Source Destination ProtocolInfo3 0.228594 10.0.80.140 10.0.10.14 FTAMf-end-group-request:

Frame 3 (160 bytes on wire, 160 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
  file-PDU: f-begin-group-request (22)
      f-begin-group-request
FTAM
  file-PDU: f-select-request (6)
      f-select-request
          attributes
              pathname: incomplete-pathname (0)
                  incomplete-pathname:
                      Item: .
          Padding: 0
          requested-access: 80 (read)
              1... .... = read: True
              .0.. .... = insert: False
              ..0. .... = replace: False
              ...0 .... = extend: False
              .... 0... = erase: False
              .... .0.. = read-attribute: False
              .... ..0. = change-attribute: False
              .... ...0 = delete-Object: False
FTAM
  file-PDU: f-open-request (18)
      f-open-request
          Padding: 3
          processing-mode: 80 (f-read)
              1... .... = f-read: True
              .0.. .... = f-insert: False
              ..0. .... = f-replace: False
              ...0 .... = f-extend: False
              .... 0... = f-erase: False
          contents-type: proposed (1)
              proposed: document-type (0)
                  document-type
                      document-type-name: 1.3.14.5.5.9

BER: Dissector for OID:1.3.14.5.5.9 not implemented.Contact Ethereal developers if you want this supported

                          [0]  (len:4 bytes)

BER Failure decoding unknown BER structure. Itried but sometimes decoding unknown BER structures is just impossible

                          BER: Error can not handle class:3 (0xfe)
FTAM
  file-PDU: f-end-group-request (24)

f-end-group-requestNo. Time Source Destination ProtocolInfo5 0.432438 10.0.80.140 10.0.10.14 FTAMf-read-request:

Frame 5 (93 bytes on wire, 93 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
  bulk-Data-PDU: f-read-request (32)
      f-read-request
          file-access-data-unit-identity: first-last (0)
              first-last: first (0)
          access-context

access-context: unstructured-all-data-units (5)No. Time Source Destination ProtocolInfo7 0.634105 10.0.80.140 10.0.10.14 FTAMf-transfer-end-request:

Frame 7 (83 bytes on wire, 83 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
  bulk-Data-PDU: f-transfer-end-request (35)

f-transfer-end-requestNo. Time Source Destination ProtocolInfo8 0.636588 10.0.10.14 10.0.80.140 FTAMf-transfer-end-response:

Frame 8 (80 bytes on wire, 80 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
  bulk-Data-PDU: f-transfer-end-response (36)
      f-transfer-end-response

action-result: success (0)No. Time Source Destination ProtocolInfo9 0.637101 10.0.80.140 10.0.10.14 FTAMf-end-group-request:

Frame 9 (124 bytes on wire, 124 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
FTAM
  file-PDU: f-begin-group-request (22)
      f-begin-group-request
FTAM
  file-PDU: f-close-request (20)
      f-close-request
FTAM
  file-PDU: f-deselect-request (8)
      f-deselect-request
FTAM
  file-PDU: f-end-group-request (24)

f-end-group-requestNo. Time Source Destination ProtocolInfo11 0.833571 10.0.80.140 10.0.10.14 FTAMf-terminate-request:

Frame 11 (104 bytes on wire, 104 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
  fTAM-Regime-PDU: f-terminate-request (2)

f-terminate-requestNo. Time Source Destination ProtocolInfo12 0.836782 10.0.10.14 10.0.80.140 FTAMf-terminate-response:

Frame 12 (90 bytes on wire, 90 bytes captured)

TPKT
ISO 8073 COTP Connection-Oriented Transport Protocol
ISO 8327-1 OSI Session Protocol
ISO 8823 OSI Presentation Protocol
ACSE
FTAM
  fTAM-Regime-PDU: f-terminate-response (3)

f-terminate-responseAnders Broman wrote:

Hi,
I've checked in the packet-ber.c patch.
Best regards

Anders

.............................................................Программа создания веб-сайтов за два дня: http://web.sema.ru/

References:
- SV: SV: [Ethereal-dev] PRES and RTSE dissectors (and X.400dissectors)-> BER CHOICE PROBLEM
  - From: Anders Broman

Prev by Date: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (and X.400dissectors)-> BER CHOICE PROBLEM
Next by Date: RE: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (andX.400dissectors)-> BER CHOICE PROBLEM
Previous by thread: SV: SV: [Ethereal-dev] PRES and RTSE dissectors (and X.400dissectors)-> BER CHOICE PROBLEM
Next by thread: [Ethereal-dev] Re: Patch to packet-dec-dnart.c
Index(es):
- Date
- Thread

Riverbed Cascade Pilot: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Riverbed AirPcap: Complete Visibility of Your Wireless Networks; Multi-Channel, Aggregated Analysis; Portable and Versatile; Easy to Setup and Easy to Use; Ready to Power Your Application

$Riverbed TurboCap: Full-Speed GbE Capture; Port Aggregation; Pass-thru Mode; Aggregating Tap; Full-Speed GbE Injection; Exported Interfaces; TurboCap API Developer\'s Pack$