First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Asterix Cat 48 Special Purpose Field

Hello,

I wonder since I couldn't find it, how can I make a filter for Asterix Cat 48 Special Purpose Data (Not Special purpose indicator asterix.048_SP)

Thanks

Leonardo

asked 2018-06-26 19:15:57 +0000
This post is a wiki. Anyone with karma >750 is welcome to improve it.
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

It's not clear to me which field you are asking about so I'll give the answer for the two fields I think you may be asking about.

1) The Asterix Cat 048 - Special Purpose Data Item (or SP for short) with FRN 27 is used by implementations in a proprietary way.

However, the current implementation of the ASTERIX dissector (Wireshark v2.6.5) doesn't actually populate this field with any data, even if there is any.

Therefore the only way to match against it today is to either check if the 048_SP field exists or by checking the entire message, e.g.:

  • asterix.048_SP (matches if the asterix.048_SP field exists)
  • asterix[23:3]==78:9a:bc (matches if the 3-byte sequence at offset 23 (zero based) is equal to the byte sequence 0x78, 0x9a, 0xbc).
  • asterix contains 78:9a:bc (matches if the byte sequence 0x78, 0x9a, 0xbc is found in the field).

2) The Asterix Cat 048 - Special Position Indicator (or SPI for short) within FRN 3 is a 1-bit field/flag within Data Item 020, it can therefore be accessed by using the field name, i.e.:

  • asterix.048_020_SPI==1 (matches if the SPI flag is set)

See Display Filters for details.

Edit: Corrected an error on my part where I thought it was possible to probe inside the asterix.048_SP field.

Atli's avatar
3
Atli
answered 2018-12-09 01:33:32 +0000, updated 2018-12-17 02:01:32 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer