This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 4 and 5
Revision 4 as of 2005-09-15 07:24:53
Size: 1532
Comment:
Revision 5 as of 2005-09-15 22:53:18
Size: 1373
Editor: UlfLamping
Comment: some editing
Deletions are marked like this. Additions are marked like this.
Line 12: Line 12:
 * ["TCP"]: Typically, PROTO uses ["TCP"] as its transport protocol. The well known TCP port for PROTO traffic is 80.  * ["COTP"]: Typically, PRES uses ["COTP"] as its transport protocol.
* XXX - is ["CLTP"] also used as transportation protocol?
Line 20: Line 21:
The PRES dissector is generated by the ["ASN2ETH"} compiler. The PRES dissector is generated by the ["ASN2ETH"] compiler.
Line 24: Line 25:
(XXX add links to preference settings affecting how PROTO is dissected). (XXX add links to preference settings affecting how PRES is dissected).
Line 35: Line 36:
 Show only the PROTO based traffic: {{{  Show only the PRES based traffic: {{{
Line 40: Line 41:
You cannot directly filter PRES protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.

 Capture only the PRES traffic over the default port (80): {{{
 tcp port 80 }}}
You cannot directly filter PRES protocols while capturing.

CONNECTION-ORIENTED PRESENTATION PROTOCOL (PRES)

This protocol is defined as ITU recommendation X.226

History

This protocol is part of the OSI stack.

Protocol dependencies

  • ["COTP"]: Typically, PRES uses ["COTP"] as its transport protocol.
  • XXX - is ["CLTP"] also used as transportation protocol?

Example traffic

XXX - Add example traffic here (as plain text or Ethereal screenshot).

Ethereal

The PRES dissector is generated by the ["ASN2ETH"] compiler.

Preference Settings

(XXX add links to preference settings affecting how PRES is dissected).

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.

  • attachment:SampleCaptures/PROTO.pcap

Display Filter

A complete list of PRES display filter fields can be found in the [http://www.ethereal.com/docs/dfref/p/pres.html display filter reference]

  • Show only the PRES based traffic:

     pres 

Capture Filter

You cannot directly filter PRES protocols while capturing.

* [http://www.itu.int/ITU-T/asn1/database/itu-t/x/x226/index.html] ITU PRES page.

Discussion

PRES (last edited 2008-04-12 17:51:24 by localhost)