This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to decode CORBA over SSL?

Hello!

I'm trying to analyse CORBA traffic encrypted with SSL. I've clicked on the "RSA keys list" Edit button, opened the dialog to add a new entry, but when I try to set the protocol to GIOP, I get this error message:

error in column 'Protocol': Could not find dissector for: 'GIOP'

What protocol shall I use for CORBA? I can see clear text CORBA communication, so Wireshark can definitely decode the GIOP protocol.

By the way, this is on Windows with Wireshark 1.6.4.

ssl corba giop

asked 06 Dec '11, 06:44

NAR
6●1●1●2
accept rate: 0%

One Answer:

Hi, It is not possible currently a patch is needed Index: epan/dissectors/packet-giop.c =================================================================== --- epan/dissectors/packet-giop.c (revision 1075) +++ epan/dissectors/packet-giop.c (working copy) @@ -4493,7 +4493,9 @@ proto_register_field_array (proto_giop, hf, array_length (hf)); proto_register_subtree_array (ett, array_length (ett));

register_dissector("giop", dissect_giop_tcp, proto_gtp);

+ / register init routine /

register_init_routine( &giop_init); / any init stuff /

answered 06 Dec '11, 08:47

Anders ♦
4.6k●9●52
accept rate: 17%

You can try a development build (see Wirsharks home page) with revision 40107 or higer the build should finish in a couple of hours.

(06 Dec '11, 11:35) Anders ♦

Thanks, I could add GIOP in the 40110 build.

(13 Dec '11, 05:06) NAR