First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Asterix Cat 240 Decode

I searched the Asterix CAT 240 protokol decoding in wireshark. I want to decide whether or not the CAT 240 is based on the captured packages in wireshark. Is this possible? I want to see all necessary fields. Is there built-in support of Wireshark for this work?

don_rt's avatar
1
don_rt
asked 2019-06-09 10:42:15 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

2 Answers

0

Unfortunately for you the current Asterix dissector does not support category 240 message dissection. Either no one has created it, or it has not been submitted for inclusion in the repository.

Jaap's avatar
13.7k
Jaap
answered 2019-06-09 16:40:06 +0000
edit flag offensive 0 remove flag delete link

Comments

Which Asterix category messages can be supported in Wireshark ? (i.e: 034, 048 ...etc)

don_rt's avatar don_rt (2019-06-09 19:34:14 +0000) edit

Probably all of them, it's just a matter of adding the code to the dissector. Once someone finds the interest to add it, that may happen. If you can't do it yourself, you can always file an enhancement bug report, preferably with a sample capture file.

Jaap's avatar Jaap (2019-06-10 04:07:31 +0000) edit

FYI, bug reports are made at the Wireshark Bugzilla.

grahamb's avatar grahamb (2019-06-10 16:44:21 +0000) edit

Hello again. How can I add a dissector ability for received packets? Should I write an custom script ? Can you give an application note or reference code for dissector the received packets?

don_rt's avatar don_rt (2019-06-13 17:11:11 +0000) edit

The code for the existing dissector is here and this is the file to which the code should be added.

Jaap's avatar Jaap (2019-06-13 20:22:39 +0000) edit
add a comment see more comments
0

I see what you mean now.

The plugins are for old versions, and I suspect using XML based dissection would be slower than the current built-in dissector.

It would be a difficult decision to replace the current dissector with the XML based one, and would depend on a number of factors including performance, completeness and that the XML based one uses C++.

Personally I would just use available info to extend the current dissector as that's likely to be the least amount of work.

grahamb's avatar
23.8k
grahamb
answered 2020-01-09 11:39:36 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer