[Cbor] New wireshark API and dissector

Brian Sipos <brian.sipos+ietf@gmail.com> Thu, 30 September 2021 23:30 UTC

Return-Path: <brian.sipos@gmail.com>
X-Original-To: cbor@ietfa.amsl.com
Delivered-To: cbor@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DEA03A07EF; Thu, 30 Sep 2021 16:30:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xhPKbANhEhcM; Thu, 30 Sep 2021 16:30:14 -0700 (PDT)
Received: from mail-il1-x12e.google.com (mail-il1-x12e.google.com [IPv6:2607:f8b0:4864:20::12e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74D073A07EE; Thu, 30 Sep 2021 16:30:14 -0700 (PDT)
Received: by mail-il1-x12e.google.com with SMTP id d11so8673256ilc.8; Thu, 30 Sep 2021 16:30:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=RTSlehgaAMwwynkz32G0iqhpR29j/57qzlnIlMSk9kI=; b=VXGed5UoP2pVb/34IrJWeeC+T5Yo+Ob5cjW0lOrQKqQvm+D2k6jg+XunFQV0T4WB6z 7zCfeKJzLAhQqmAsA3joRQE+5/zFx9CINC1ST1JWyV8Uthma/ANr41pvcrNfynfpNpTI 6RAxvMkaKBFdVmyJM4NvQJf4byJmo2Freu4rgD2TtlLPGSbU5iK9QPzFtxmyQ58Dan0e JZrb3uMl/wqBALerw3OTD6mNfzask+m6G6EBYFUM5xP7iP/oiYfZlcDU5/a4gZjtMZ8x DGI2xPZsTELFgztvOMTbXY6EN92PoA2Hj+CnNmVVGyjudK8ReSQWfyzFND1eyl+16m4q c4Lg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=RTSlehgaAMwwynkz32G0iqhpR29j/57qzlnIlMSk9kI=; b=4GdGfjAibz1n14fUuy5K+rOrLRdLtsZXTJxWYqkNl9dKqgvHBrC9tnONw6P9XzOyOM KrV5VNAsYeY7tOh+eTSifSLW9m38KRnnzHT4h1sNQTWKt7n68RZU79kphUkD+4n2Kwfh iOZq0xnYocj9HcjkGFS3rBCi2iVzmbGE7vdw5pJ5XNMH3LRh2fFJC05jp0BA0shhRpE5 Btg2rEcA22gHFw4ngqp08WXc3MbDbbKnuW8rTXqA2S5wPZysWyqAK7L8Z95JITMs6znx z6U7ioiph13PgyS7f0tjSAyf6uj7KaAjpVqzqpC1CDN4bz7Z2isehnSEUDWlJ6fXMuR4 toWg==
X-Gm-Message-State: AOAM533+k9oBPwvlolv+jpVciHJVYBOrCaaPnfvsscjfoiNb6BuW1RDA jR7a+7Nw7Sl0Gg0BXxuHknHtI63n06rWBzpYRQaeWm5X
X-Google-Smtp-Source: ABdhPJw/DFIyRuFEoo+6vDaQEK80Uki4CiUqxKkPzU+0nNt1gLJtdE+pPctKaJseYCTySOxEbu7pQ+jFco36xX8TFsg=
X-Received: by 2002:a05:6e02:1a0e:: with SMTP id s14mr6505570ild.197.1633044613193; Thu, 30 Sep 2021 16:30:13 -0700 (PDT)
MIME-Version: 1.0
From: Brian Sipos <brian.sipos+ietf@gmail.com>
Date: Thu, 30 Sep 2021 19:29:56 -0400
Message-ID: <CAM1+-gj279UQMDGVty_dGwinM1Awx1kboZwxOjjd_Ptgwy82qQ@mail.gmail.com>
To: cbor@ietf.org, cose@ietf.org
Content-Type: multipart/alternative; boundary="000000000000126d5505cd3ed4e5"
Archived-At: <https://mailarchive.ietf.org/arch/msg/cbor/Ta657vKWHThaKHB_bLW1MIyI3JM>
Subject: [Cbor] New wireshark API and dissector
X-BeenThere: cbor@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Concise Binary Object Representation \(CBOR\)" <cbor.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cbor>, <mailto:cbor-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cbor/>
List-Post: <mailto:cbor@ietf.org>
List-Help: <mailto:cbor-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cbor>, <mailto:cbor-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 30 Sep 2021 23:30:19 -0000

All,
For anyone interested, a new COSE message dissector and a new CBOR decoding
API has been recently merged to the main branch of Wireshark [1]. For new
dissectors of protocols which use CBOR as their encoding, this "wscbor" API
gives a higher-level of abstraction (e.g. "text =
wscbor_require_tstr(...)") and robustness to both tags and errors in
structure and well-formedness.

Hopefully this will be helpful to other dissectors, since there are quite a
a few CBOR-based protocols in the works.

Thanks,
Brian S.

[1] https://gitlab.com/wireshark/wireshark/-/issues/17384