From 3763c702f0f6ae0aaff3a51dc52b4ec48a0d15fb Mon Sep 17 00:00:00 2001 From: Vladimir Gavrilov <105977161+0xA50C1A1@users.noreply.github.com> Date: Mon, 27 Nov 2023 16:37:48 +0300 Subject: Rework S7Comm dissector; add S7Comm Plus support (#2165) * Rework S7Comm dissector; add S7Comm Plus support * Cleanup s7comm.c * Improve S7Comm Plus detection * s7comm/s7commplus: faster detection --------- Co-authored-by: 0xA50C1A1 Co-authored-by: Nardi Ivan --- doc/protocols.rst | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'doc') diff --git a/doc/protocols.rst b/doc/protocols.rst index 42e894a64..1b40b758d 100644 --- a/doc/protocols.rst +++ b/doc/protocols.rst @@ -243,3 +243,13 @@ References: `Protocol Specs: `_. IEC62541 OPC Unified Architecture References: `Protocol Specs: `_. + + +.. _Proto 361: + +`NDPI_PROTOCOL_S7COMM_PLUS` +============================ +A proprietary protocol from Siemens used for data exchange between PLCs and access PLC data via SCADA systems. +Completely different from classic S7Comm, but also uses TPKT/COTP as a transport. + +References: `Unofficial description: `_. -- cgit v1.2.3