PLC could not be connected

[jogibear9988]

I've a old PLC with Firmware 2.1 wich could not be connected:
PLC: 1510SP F-1 PN
MLFB: 6ES7 510-1SJ01-0AB0

[+] Connected to 10.0.100.99:102
Sending COTP CR...
Waiting for COTP Connection Confirm
Creating a session object
Waiting for create object response
Session ID: 0x00000000
[?] Fingerprint does not start with 03:, checking family0/1 offset...

[-] Fingerprint does not start with 03: nor with 00:. Exiting

[bonk-dev]

Send a wireshark dump of the connection attempt and I'll check it out.

If that copilot solution works for you, please open a pull request in this repo.

[jogibear9988]

Is this the fingerprint:

Maybe we can use Copilot to chang ethe code that it uses the S7CommPlus dissector source to use the telegram structure?

[bonk-dev]

yup this is it. Definitely do not use the dissector source as it's licensed under GPL 2 AFAIK and HarpoS7 is under MIT.
That being said, nothing is stoping you from implementing some form of dynamic parsing - just don't copy code over from Thomas' dissector.