Wireshark-bugs: [Wireshark-bugs] [Bug 4590] New: ANCP (Access Node Control Protocol) Dissector
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 17 Mar 2010 03:14:15 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4590

           Summary: ANCP (Access Node Control Protocol) Dissector
           Product: Wireshark
           Version: 1.3.x (Experimental)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: aniruddha.a@xxxxxxxxx


Created an attachment (id=4412)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=4412)
patch

Build Information:
wireshark 1.3.0 (SVN Rev 29663 from /trunk)

Copyright 1998-2009 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.16.2, with GLib 2.20.5, with libpcap 0.8.3, with libz
1.2.1.2, with POSIX capabilities (Linux), without libpcre, without SMI, without
c-ares, without ADNS, without Lua, without Python, without GnuTLS, without
Gcrypt, without Kerberos, without GeoIP, without PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.9-67.0.7.ELsmp, with libpcap version 0.8.3.

Built using gcc 3.4.6 20060404 (Red Hat 3.4.6-9).

--
Protocol:
--------
The Access Node Control Protocol (ANCP) is a standards based protocol intended
to facilitate the transmission of control and dynamic subscriber configuration
information between an access node (DSLAM) and a L3 subscriber aware controller
(BRAS/NAS).
It is a TCP/IP based protocol using GSMPv3(RFC 3292) messages.
Uses TCP port 6068.

Dissector:
----------
The dissector can dissect the following ANCP messages now:
 - Adjacency messages
 - Event Messages (Port Up/Down)
 - Port Management messages
And adds statistics for the same.

Test:
-----
The dissector has been fuzz tested with upto 100 iterations at error 
prob 0.02 and 0.03

Attachments:
-----------
packet-ancp.diff  (diff of packet-ancp.c and Makefile.common)
ancp.pcap         (sample capture file)

ANCP on IETF:
----------------
http://tools.ietf.org/wg/ancp/
http://tools.ietf.org/html/draft-ietf-ancp-protocol-09

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.