Hi, this dissector Anders mention only apply for the GOOSE (server-server communication) dissection. The thing Roman wants is the standard IEC 61850 (server-client) communication. Thus this is done by MMS pakets, and MMS is a supported protocol by wireshark, those pakets should dissect fine in wireshark. You have to filter by "mms" to get all IEC 61850 related packages. There are only some fragments (timestamp for example) which wireshark does not understand. Regards, Martin.
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Anders Broman Sent: Tuesday, April 28, 2009 10:57 AM To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] IEC dissectors Hi, We do have something in SVN: packet-goose.c * Routines for IEC 61850 GOOSE packet dissection Regards Anders ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Jaap Keuter Sent: den 28 april 2009 10:45 To: Developer support list for Wireshark Subject: Re: [Wireshark-dev] IEC dissectors Hi, It's their own addition to Ethereal (0.99.0), of which you can ask the code. I've looked at it a long time but wasn't sure how to put it into Wireshark as it is now. Thanx, Jaap Sent from my iPhone On 28 apr 2009, at 00:03, Roman Lisagor <[email protected]> wrote: Hi guys, Came across an Ethereal-based analyzer for IEC61850, IEC60870-6 TASE.2 (ICCP), MMS, UCA2, and IEEE C.37-118. First link on this page: <http://www.sisconet.com/techinfo.htm> http://www.sisconet.com/techinfo.htm Looks like I can download the binaries but the source is missing. Those dissectors also don't seem to be part of Wireshark (as of 1.0.7). Does anyone know if they have they ever been submitted? If not then I will ask for the source directly from SISCO. Thanks, Roman. ________________________________________________________________________ ___ Sent via: Wireshark-dev mailing list <[email protected]> Archives: <http://www.wireshark.org/lists/wireshark-dev> http://www.wireshark.org/lists/wireshark-dev Unsubscribe: <https://wireshark.org/mailman/options/wireshark-dev> https://wireshark.org/mailman/options/wireshark-dev <mailto:[email protected]?subject=unsubscribe> mailto:[email protected]?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
