Wireshark-bugs: [Wireshark-bugs] [Bug 6319] New: Add dissector for XMCP protocol
Date: Thu, 8 Sep 2011 05:42:55 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6319

           Summary: Add dissector for XMCP protocol
           Product: Wireshark
           Version: unspecified
          Platform: Other
        OS/Version: Mac OS X 10.6
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: glenn.matthews@xxxxxxxxx


Build Information:
TShark 1.7.0 (SVN Rev 38485 from /trunk)

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.24.2, with libpcap 1.0.0, with libz 1.2.3,
without
POSIX capabilities, with threads support, without libpcre, without SMI, without
c-ares, without ADNS, without Lua, with Python 2.6.1, without GnuTLS, without
Gcrypt, with MIT Kerberos, without GeoIP.

Running on Mac OS 10.6.8 (Darwin 10.8.0), with locale en_US.UTF-8, with libpcap
version 1.0.0, with libz 1.2.3.

Built using gcc 4.2.1 (Apple Inc. build 5666) (dot 3).

--
Adding a new dissector for the XMCP protocol. This protocol is based loosely on
STUN but uses a different "magic cookie" number in the header so I've updated
packet-classicstun.c to fail the heuristic checks for STUN if the XMCP magic
cookie is detected.

Dissector includes:
- Dissection of XMCP packets
- XML content within an XMCP packet is handed off to XML dissector
- Support for TCP reassembly (tcp_dissect_pdus) for both heuristic and explicit
XMCP dissectors
- Proper handling of packets truncated during capture
- Association of request/response packet pairs in conversations
- Expert info provided for session initiation/termination, error messages,
malformed packets, and a number of protocol conformance failures.

Has been fuzz tested extensively.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.