[Wireshark-dev] wireshark-dev resubscription requested

2022-03-03 Thread Gerald Combs
Hi all, As you may have heard, the Wireshark project is now sponsored by Sysdig, Inc. ("Sysdig"). As part of this acquisition, Sysdig will operate Wireshark's infrastructure, including this mailing list and you must renew your subscription to this list in order to continue to receive emails.

Re: [Wireshark-dev] First 4 bytes in SNMP application data

2022-03-03 Thread chuck c
Whoops - typo on the version. value=1 is snmpv2c https://gitlab.com/wireshark/wireshark/-/blob/master/epan/dissectors/packet-snmp.c#L2115 static const value_string snmp_Version_vals[] = { { 0, "version-1" }, { 1, "v2c" }, { 2, "v2u" }, { 3, "snmpv3" }, { 0, NULL } }; Not sure th

Re: [Wireshark-dev] First 4 bytes in SNMP application data

2022-03-03 Thread Jaap Keuter
Hi, What you’re looking at is the SNMP encoding according to the Basic Encoding Rules[2] (BER). These octets define the BER structure. For example a 64 octet SNMPv3 message starts as such: SNMPv3Message ::= SEQUENCE { 30 3E msgVersion INTEGER ( 0 .. 2147483647 ), 02 01 03 Where 30 defi

Re: [Wireshark-dev] First 4 bytes in SNMP application data

2022-03-03 Thread chuck c
SNMP (https://datatracker.ietf.org/doc/html/rfc1157) uses ASN.1 BER ( https://en.wikipedia.org/wiki/X.690#BER_encoding) to define the data. "These types of encodings are commonly called type–length–value (TLV) encodings" (See https://datatracker.ietf.org/doc/html/rfc1592 for a packet diagram) It

[Wireshark-dev] First 4 bytes in SNMP application data

2022-03-03 Thread Chandra Japan
Hi Wireshark Team, Please let me know what does first 4 bytes in SNMP Data indicate because I could see from 5th byte I see version and other things Regards Chandramohan ___ Sent via:Wireshark-dev mailing list Archives