Wireshark · Wireshark-dev: [Wireshark-dev] Help on NBAP

[tulip neo <neo.tulip@xxxxxxxxx>]

Hi List,

I need help to understand how Transportlayeraddress is decoded.TransportLayerAddress is per bit string (20 ocetet) which is decoded as follows:

 

transportLayerAddress 350001 : 10.3.35.131

How ever the 20 octet for transportlayer address is

 

35 00 01 0a 03 23 83 00 00 00 00 00 00 00 00 00 00 00 00 00.

 

I guess its decoded as port number:ip address

 

Can any one give me pointer how ip address can be fetched from transportlayeraddress?

in this case ide decodes it decodes first 3 ocetet as port number or some thing else.?

next 4 ocetet is converted to dotted decimal ip address.

 

can any one give me some pointer where i can find info about composing transportlayeraddress to port number(as i guess) and ip address.

How if there are no octetes after 7 octets having 00 value. i mean if we have transportlayeraddress as 35 00 01 0a 03 23 83 11 22 33 44 55 66 77 88 99 11 22 33 44.

link where u can see the decoding is as folows:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1951

here soem decoding logs are given where transpostlayeraddress is decoded as

transportLayerAddress 350001 : 10.3.35.131

 

Br

Tulip

 

 

 

---

 Connect with friends all over the world.  Get Yahoo! India Messenger.