First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Dissector for RFC 8505

Hi,

I'm developing 6LoWPAN-ND for ns-3, and wireshark is very useful to spot mistakes... except when it doesn't have a dissector for the protocol.

Now, the problem is: wireshark doesn't seems to understand RFC 8505 (i.e., the updates to RFC 6775).

Is there any work on that direction or my best chance is to develop a dissector by myself ?

Thanks,

T.

TommyPec's avatar
1
TommyPec
asked 2020-06-28 11:30:45 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Looking at packet-icmpv6.c, it appears that there is no support for RFC 8505, e.g. the dissection of the ARO is as stated in RFC 6775.

The comments indicate that even 6775 support was provisional, e.g.

/* Address Registration (TBD1 Pending IANA...) */

There are no plans as such for dissector additions or improvements, enhancement requests may be added to the Wireshark Bugzilla and adding a capture to a request improves the chances of someone else picking it up, but, as is the case for most Wireshark dissector changes, someone such as yourself has an "itch" and writing the code solves the problem.

Note that you'll be modifying the existing ICPMv6 dissection code, not adding a new dissector. The Wireshark Developer's Guide and the various README.* files in the docs directory of the source tree will be immensely helpful when starting work on the Wireshark codebase.

grahamb's avatar
23.8k
grahamb
answered 2020-06-28 13:10:13 +0000
edit flag offensive 0 remove flag delete link

Comments

Thanks for the quick reply.

I found that something might have been done in the past (see ETSI 6TiSCH Interoperability Test Description), but they didn't release any code.

I'll try poke ETSI, perhaps I'll find something to start working from.

Cheers,

T.

TommyPec's avatar TommyPec (2020-06-28 13:54:00 +0000) edit

As they apparently distributed Wireshark, the GPL 2.0 or later licence that Wireshark uses requires them to make the modified source files available.

grahamb's avatar grahamb (2020-06-28 15:11:10 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer