This website is not affiliated with, sponsored by, or approved by SAP AG.

SAP DIAG Decompress plugin for Wireshark

SAP Security

Moderators: Snowy, thx4allthefish, jurjen

SAP DIAG Decompress plugin for Wireshark

Postby sappentest » Mon Oct 17, 2011 8:49 am

May be you are interested:

"SAP DIAG Plugin extends the basic functionality of the WireShark network packet analyzer and provides additional features of SAP DIAG protocol analysis. This extension allows one to collect and decompress SAP DIAG packets in the course of interaction between SAP FronTend client software and SAP application servers."

Blog / Download URL:
http://ptresearch.blogspot.com/2011/10/ ... n-for.html
sappentest
 
Posts: 1
Joined: Mon Oct 17, 2011 8:44 am

Re: SAP DIAG Decompress plugin for Wireshark

Postby Al. » Tue Oct 18, 2011 6:16 am

Interesting. This reinforces the case for implementing encryption between front-end and app server as standard good security practice.
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London

Re: SAP DIAG Decompress plugin for Wireshark

Postby os » Sat Oct 22, 2011 11:18 am

IMO this is a good thing to make the decompression publicly available.

Naughty and curious folks already worked it out, so this helps promote SNC as the solution.
os
 
Posts: 469
Joined: Wed Dec 21, 2005 10:51 am

Re: SAP DIAG Decompress plugin for Wireshark

Postby Al. » Sun Oct 23, 2011 11:28 pm

I agree. The algorithm has been "in the wild" for a while. It was only a matter of time before it was wrapped up in a tool.

To put a bit of perspective on it, if you put a sniffer on a network of any large organisation you will likely get password credentials. Sharepoint sites which are not running SSL are a prime candidate for this....
http://www.turnkeyconsulting.com/
Al.
 
Posts: 3050
Joined: Tue Feb 25, 2003 5:35 am
Location: London


Return to SAP Security

Who is online

Users browsing this forum: No registered users and 5 guests





loading...


This website is not affiliated with, sponsored by, or approved by SAP AG.