Duffy O'Craven

SNAP frame of BACnet/MSTP shows up in weird.log

3

SNAP frame of BACnet/MSTP is a little bit off the beaten path, but not so far off that it deserves to go in weird.log ``` #path weird #open 2020-08-17-20-24-08 #fields...

BVLC Layer 6 thru 8 messages should be implemented

6

In the bvlc_function layer atop UDP which your work identified and which zeek-plugin-bacnet has handled: switch(bvlc_function) { case 0x00: ##! BVLC_RESULT case 0x05: ##! REGISTER_FOREIGN_DEVICE case 0x01, ##! WRITE_BROADCAST_DISTRIBUTION_TABLE 0x02,...

BACnet-Reject-PDU and BACnet-Abort-PDU to be supported

1

``` BACnet-Reject-PDU ::= SEQUENCE { pdu-type Unsigned (0..15), -- high four bits, 0x60 for this PDU type reserved Unsigned (0..15), -- low four bits, always 0 for this PDU type...

Reject-Message-To-Network single octet as uint8, then the network number parameters as uint16

1

Reject-Message-To-Network differs from the other Network Layer messages, that it has as its parameters first: a reject reason single octet as uint8. Then the network number parameters (each is uint16)...

enumerated treatment beyond case 2: action, 25: limit enable, 107: segmentation support, 112: system status

7

Curious that current code has confined the Read-Property-Response enumerated treatment to solely: ``` switch(property_identifier) { case 2: ##! action data[data_index] = fmt("value=%s", action[value]); break; case 25: ##! limit enable data[data_index]...