dw2102 / S7Comm-Analyzer

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

ISO over TCP / S7Comm protocol analyzer.

Based on the Wireshark dissector written by Thomas Wiens 
https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-s7comm.h
https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-s7comm.c
https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-s7comm_szl_ids.h
https://github.com/wireshark/wireshark/blob/master/epan/dissectors/packet-s7comm_szl_ids.c
https://sourceforge.net/projects/s7commwireshark/

partially on the PoC S7Comm-Bro-Plugin written by György Miru
https://github.com/CrySyS/bro-step7-plugin/blob/master/README.md,

RFC 1006 (ISO Transport Service on top of the TCP)
https://tools.ietf.org/html/rfc1006

and RFC 905 (ISO Transport Protocol Specification)
https://tools.ietf.org/html/rfc0905

Author: Dane Wullen
Date: 02.06.2023
Version: 1.1

This plugin was a part of a master's thesis written at Fachhochschule in Aachen (Aachen University of Applied Sciences)
Rewritten for Zeek version 5.0.9

About

License:BSD 3-Clause "New" or "Revised" License


Languages

Language:C++ 64.8%Language:Zeek 21.8%Language:C 12.0%Language:Shell 0.8%Language:CMake 0.3%Language:Makefile 0.3%