Wireshark-bugs: [Wireshark-bugs] [Bug 5471] New: [PATCH] Addition of support for DNP3 Analog Inp
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5471
Summary: [PATCH] Addition of support for DNP3 Analog Input
Deadband object type
Product: Wireshark
Version: SVN
Platform: All
OS/Version: All
Status: NEW
Severity: Enhancement
Priority: Low
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: robc@xxxxxxxxxxxxxxxxx
Build Information:
Version 1.5.0 (SVN Rev 35150 from /trunk)
Copyright 1998-2010 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (32-bit) with GTK+ 2.16.6, with GLib 2.24.2, with WinPcap (version
unknown), with libz 1.2.3, without POSIX capabilities, without libpcre, with
SMI
0.4.8, with c-ares 1.7.1, with Lua 5.1, without Python, with GnuTLS 2.8.5, with
Gcrypt 1.4.5, with MIT Kerberos, with GeoIP, with PortAudio V19-devel (built
Dec
8 2010), with AirPcap.
Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.1.1
(packet.dll version 4.1.0.1753), based on libpcap version 1.0 branch 1_0_rel0b
(20091008), GnuTLS 2.8.5, Gcrypt 1.4.5, without AirPcap.
Built using Microsoft Visual C++ 9.0 build 30729
Wireshark is Open Source Software released under the GNU General Public
License.
Check the man page and http://www.wireshark.org for more information.
--
The attached patch incorporates support within the DNP3 dissector for decoding
of Analog Input Deadband object types (Object 34).
>From DNP3Spec-V6-Part1-ObjectLibraryBasics-20071215:
An analog input event is generated based upon the difference of its current
value and the value that was most recently queued as an event, when compared to
a deadband value. There are two methods commonly used for detection of analog
input events based upon a deadband.
* Fixed Deadband. If the absolute value of the difference between the present
value of an analog input point and the value that was most recently queued as
an event for that point exceeds the deadband value, then an event is generated
for that point.
* Integrating Deadband. The difference between the present value of an analog
input point and the value that was most recently queued as an event for that
point is integrated over time. An event is generated when the absolute value of
the integral exceeds the deadband value.
DNP3 does not specify which algorithm shall be used for deadbanding, and
outstation vendors may choose to implement any deadbanding method, or none on
any point.
Deadband values may be downloaded via the [DNP3] protocol. Devices that support
analog input deadbands are not required to maintain the deadband values through
a reset and may revert to default values immediately following the reset.
Vendors of devices that are able to preserve updated deadband values through a
reset should note this in their device profile.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
