Andreas Schuler <krater (A) badterrorist.com>

Matthias Wenzel <dect (A) mazzoo.de>

Beginnings of a DECT dissector. This is a copy of the svn
repository at dedected.org with the following modifications:

- Change from plugin to normal dissector
- Change comments from // to /* */
- Change German comments to English
- #if-0-out unused variables
- Reorder functions to avoid forward declarations and use the normal
  Wireshark conventions
- Fix the scrt table (as by email from Andreas)
- Fix Mask for hf_dect_A_Tail_Qt_0_Cn from 0x2F -> 0x3F (as by email
  from Matthias)
- Initialize some variables because GCC isn't aware of the reduced
  value space in a switch statement that switches on (var & 7).
- Declare some function parameters as _U_
- Add GPLv2 and later header (as by emails from Andreas and Matthias).

TODO (roughly in that order)
  - Don't use structs to access the elements in the datastream.
  - Use tvb_..._item wherever possible
  - Add references to documentation (ETSI EN 300 175 parts 1-8)
    including the section.
  - Make things stateful
  - Once the capture format has stabilized, get rid of the Ethernet
    hack and use a proper capture type.


svn path=/trunk/; revision=27362
This commit is contained in:
Jörg Mayer 2009-02-03 21:30:36 +00:00
parent d8c9b78b3c
commit f79a85e204
3 changed files with 2003 additions and 0 deletions

42
README.DECT Normal file
View File

@ -0,0 +1,42 @@
$Id$
Description:
============
DECT pcap files can be obtained by using tools coming with the linux
kernel driver for the Dosch-and-Amand COM-ON-AIR cards. The driver is
called com-on-air_cs.
Wireshark itself cannot directy record from the DECT HW, as the driver
currently lacks a virtual network interface.
There is ongoing work to change this (see this work by Patrick McHardy):
git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/dect-2.6.git
git clone git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libnl-dect.git
git clone git://git.kernel.org/pub/scm/libs/netlink/libnl.git
Also needed are a proper linktype value assigned by the libpcap team and
the proper patches for libpcap to support this (the value used in the
patch below is not officially assigned!):
git://git.kernel.org/pub/scm/linux/kernel/git/kaber/libpcap-dect.git
To nicely view DECT pcap files in wireshark, set up a custom layout:
Edit->Preferences...
User Interface
Colums
No. | Number
Time | Time (format as specified)
Protocol | Protocol
TA | HP-UX Subsystem
A-Field | Network src addr
B-Field | Network dest addr
Info | Information
OK
Edit->Configuration Profiles...
New
Profile Name = dect
OK

View File

@ -364,6 +364,7 @@ DISSECTOR_SRC = \
packet-ddtp.c \
packet-dec-bpdu.c \
packet-dec-dnart.c \
packet-dect.c \
packet-dhcp-failover.c \
packet-dhcpv6.c \
packet-diameter.c \

File diff suppressed because it is too large Load Diff