IRATI stack and wireshark

[joholly]

Hi,

I set up alittle test enviroment with the IRATI stack. I wanted to use the wireshark application that is deposited in the project. I'm not sure if I installed it correctly. It seems that wireshark is not able to decode the recieved packages.

The output looks like this:

I also tried to use this dissector: https://github.com/SIDN/irati-wireshark-dissector.

Can someone help me with this problem?

Greetings, Jo

[edugrasa]

Hi,

The standard Wireshark package doesn't contain the logic to decode packets belonging to the core RINA protocols (EFCP and CDAP). @cschutijser wrote the dissector you have mentioned in the issue, maybe he can provide some guidance.

Cheers,

Eduard

[cschutijser]

Hi, I don't see the problem (if any) right away. It does surprise me a little that our dissector doesn't recognize the EFCP payload. In your screenshot, I see that the ethertype is 0xd1f0 and our dissector should act on that.

Is the dissector installed correctly, as explained in the README? You can verify that by starting Wireshark, then selecting Analyze > Enabled Protocols and searching for "efcp". It should display an entry.

If the dissector is indeed installed correctly, you can share a PCAP file with me and I can have a quick look.

[joholly]

Hi, I got it fixed. Installing the dissactors of the irati project with

• configure
• make
• make install didn't work. I tried to do it with cmake. Some of the generated make files were buggy. Now they are working.

[cschutijser]

Alright! Good to hear.