Ethereal-dev: Re: [Ethereal-dev] MQ dissectors + SNA LU 6.2 ?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Sat, 1 May 2004 14:24:24 -0700
On Sat, May 01, 2004 at 05:52:53PM +0200, metatech wrote:
> Here is the version 1.5 of the MQ dissector (3 files).
> Changes :
> - PDU desegmentation
> - XA messages
> - Netbios, SPX, HTTP support
> - Subdissector table

Checked in.

> I tried to test the SNA LU6.2 transport but no such stack is available for 
> free/trial on Windows (IBM has a trial version of its Communication Server 
> for Linux but not for Windows).  What LU6.2 stack do you use guys to test 
> that ?

Gilbert Ramirez did the original SNA stuff, and Jochen Friedrich did a
lot more work on it - I don't know what Gilbert was using (or whether he
still has access to it), and I *think* Jochen may be, or was, one of the
people working on the Linux SNA project.

> Anyway I had a look at packet-sna but it does not seem to have a 
> subdissector table...

You might have to add one.

> packet-mq-pcf is a MQ subdissector for the "MQ Programmable Command Formats 
> protocol" (it allows remote configuration of the MQ server (queue manager)).

Checked in, with some compiler warnings cleaned up.

The "heuristic" dissector doesn't appear to look at the packet itself;
it appears to look at a string field from the MQ packet, supplied to the
subdissector through the private_data pointer.

If it's always the case that a format property value of "MQADMIN ",
"MQEVENT ", or "MQPCF " always means it's a PCF packet, that should
probably be done, instead, with a string dissector table in the MQ
dissector, with the PCF dissector registering itself in that dissector
with values of MQ_FMT_ADMIN, MQ_FMT_EVENT, and MQ_FMT_PCF.