Wireshark-bugs: [Wireshark-bugs] [Bug 9596] IEC60870-5-104 incorrect Integrated Totals parsing
Date: Sat, 04 Jan 2014 15:53:51 +0000
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9596

--- Comment #5 from Jaka <jaka.fritz@xxxxxxx> ---
Hello Evan,

The protocol is open (?) standard but it has to be purchased. However, I have
found a document describing the format, from a rather suspicious source:
http://www.geocities.jp/ps_dictionary/standard/cpaper/IEC-R20_1.pdf page 87.

The fifth byte is a data Quality Descriptor, a set of flags describing the
data.

The number format is a 32-bit integer. The protocol says it is a signed,
although I'd expect it to be unsigned, as it is typical for counters. 

I also added some older capture files for reference on other data types.

Have a prosperous year.

Cheers,
Jaka

-- 
You are receiving this mail because:
You are watching all bug changes.