looking at packet-acse.c and comparing it with the ASN1 definition in
http://www.itu.int/ITU-T/asn1/database/itu-t/x/x227bis/1998/ACSE-1.html
it appears the current implementation is a very small subset of the
full protocol.
So I propose as soon as possible to convert it to packet-ber and being
automatically generated by our asn2eth compiler.
On Mon, 13 Sep 2004 08:19:28 +0000, Sid Sid <ysidelnikov@xxxxxxxxxxx> wrote:
> >From: Herbert Falk <herb@xxxxxxxxxxxx>
> >IEC 61850 is specifying the use of X,509 certificates for Application Level
> >Authentication within ACSE. I have extended packet-acse.c to decode this
> >and the ACSE Authentication values as specified by ACSE and the ACSE
> >Mechanism Name.
> I guess it's the best way - to extend but not to rewrite.
> >In doing so, I found that packet-acse.c and packet-pres.c make limited use
> >of ASN1.c. Thus they are vulnerable and will break if indefinite length
> >encodings are encountered.
> Strong assertion.
> Do you really have example of capture file which breaks acse/pres
> dissectors?
> If yes do you mind to send me such file(s) ?
> I guess all what we need is to path acse/pres dissectors if need be using
> such capture file.
> I already have MMS capture file you've sent me couple of months ago - seems
> ok with acse/pres dissectors.
> Thank you.
>
> _________________________________________________________________
> MSN 8 with e-mail virus protection service: 2 months FREE*
> http://join.msn.com/?page=features/virus
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>