question

PDCalnex avatar image
PDCalnex asked PDCalnex commented

Decode signature field

I need to analyse some packets in python and need the sequence number from the spirent signature field.

The only details I have found on the signature field are that it is scrambled and that it can be decoded in a special version if wireshark which I cannot use for this application.

It looks like the complement of sequence byte is used for the encoding and that the encoding depends upon a bytes position within the signature field.

Does anyone know the details of the scrambling algorithm?

Spirent TestCenter (STC)pythondecodesignature field
10 |950
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
mnakamura avatar image
mnakamura answered PDCalnex commented

I don't have direct answer but wanted to mention the current version of wireshark shows decode of spirent signature. Go to Analyze->Enable Protocols, and select STCSIG.

1 comment
10 |950
Toggle Comment visibility. Current Visibility: Viewable by all users

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

PDCalnex avatar image PDCalnex commented ·

Oh great, I didn't know that and it will come in handy elsewhere!

0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.