Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 4652] Unable to decode IBM's Websphere MQ traffic

Date: Fri, 9 Apr 2010 00:59:12 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=4652

--- Comment #3 from Gerasimos Dimitriadis <dimeg@xxxxxxxxxxx> 2010-04-09 00:59:06 PDT ---
These 5 octets before the "TSH " seem to be some kind of TLV element containing
the length of the MQ message: Tag is 0x17, Length is 3 and Value contains the
message size in 3 octets in big endian form.

Since I am not an expert in MQ and little information can be found in the web
regarding this protocol, I am leaving this one to someone who can deal with it.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.