SAP Dissection plug-in for Wiresharkcontributed

Repository: https://github.com/SecureAuthCorp/SAP-Dissection-plug-in-for-Wireshark

Contribution

SAP Dissection plug-in was authored as part of my intial research about the Diag protocol and published as an open source tool in July 2012. The tool was further expanded to cover other SAP’s network protocols.

SAP Dissection plug-in was contributed to the main Wireshark project in October 2022 by SecureAuth which was my employer at that time. The dissectors are now part of the core dissection library and been actively maintained by the Wireshark Foundation community.

Description

SAP Netweaver and SAP HANA are technology platforms for building and integrating SAP business applications. Communication between components uses different network protocols. While some of them are standard and well-known protocols, others are proprietaries and public information is not available.

This Wireshark plugin provides dissection of SAP’s NI, Message Server, Router, Diag, Enqueue, IGS, SNC and HDB protocols. The dissectors are based on information acquired at researching the different protocols and services. Additional experimental support is included for SAP’s RFC protocol. Detailed information about the research can be found in pysap’s documentation.