Anders,
> >Is this making any sense?
> Sort of, I have made a change to the PRES dissector to store
> the PC and use
> The OID of the PC to call the dissector of the data, thus
> bypassing ACSE for
> PC 03 and 05 in the example above.
> For PC 0 ACSE will be called which in turn will call 2.6.0.1.6
> (mts-transfer(6)). Will that take care of the problem? I'll
> check the code
> in and you can gave a look. If it does not work we can change it.
I've had a look at the code and attach some proposed changes for discussion.
Basically the changes are:
a) [pres] make the find_oid_by_[pres_]ctx_id (I changed the name to make it
more specific) non-static so it can be called from other dissectors (see
acse.cnf changes). I also call it from RTSE and ROS dissectors
b) [acse] remove (#ifdef NOT_NEEDED) the oid lookup table and any reference
to acse_handle - as these are no longer needed
c) [acse] register the acse dissector on 2.2.1.0.1
This means that no dissector is now called on the association context - they
are always dispatched on the presentation context.
This works for my X.400 captures, and seems to work for the CMIP capture you
hightlighted in a previous message.
Let me know what you think.
Graeme
P.S. Do you have any suggestions for a better approach to reassembling
contructed OCTET STRINGs?
Attachment:
pres.diff
Description: Binary data