roberthogan.net » Uncategorized http://roberthogan.net Illustrating the fine line between clever and stupid. Sat, 17 Oct 2009 16:07:54 +0000 http://wordpress.org/?v=2.8.4 en hourly 1 Wireshark Dissector: TN5250 Protocol http://roberthogan.net/?p=30 http://roberthogan.net/?p=30#comments Sat, 17 Oct 2009 13:34:42 +0000 http://roberthogan.net/?p=30 Finished this a while ago, and it’s close to reaching wireshark trunk. The patch is available here. The TN5250 specs and whatnot are available here . I’ve also created a TN5250 reference page on the Wireshark Wiki . As a protocol, TN5250 is only marginally less bizarre than it’s daddy TN3270. Oddly, it was also harder to code for – maybe state machines were all the rage at the time but they make a dissector’s life much more fussy. In summary, yet another typing-trial by endurance. Still haven’t figured out my motivation for doing it!

TN5250 Dissector

TN5250 Dissector

]]> http://roberthogan.net/?feed=rss2&p=30 0 Wireshark Dissector: TN3270 Protocol http://roberthogan.net/?p=27 http://roberthogan.net/?p=27#comments Sat, 18 Jul 2009 10:16:44 +0000 http://roberthogan.net/?p=27 My protocol analyser for the TN3270 protocol is now available in Wireshark. TN3270 is the protocol created by IBM in 1972 for a class of terminals normally used to communicate with IBM mainframes. There was a time when TN3270 accounted for a significant portion of the world’s network traffic and it is still widely used today – mainly because big iron just refuses to lie down and die. The omission from Wireshark of such an important protocol in the history of network communications always struck me as a little odd. So with the help of the trusty “3270 Information Display System: Data Stream Programmer’s Reference” (all 500 or so pages of it) I set to work. It rapidly became an exercise in typing, rather than coding. And the only reason I finished it was because I started it. Next up – TN5250.

TN3270 Dissector

TN3270 Dissector

]]> http://roberthogan.net/?feed=rss2&p=27 0