Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Anders Broman \(AL/EAB\)" <anders.broman@xxxxxxxxxxxx>
Date: Mon, 23 Apr 2007 11:37:03 +0200

Hi,
The problem here is that you must capture the setup part where the tie to MMS OID is made.
Best regards
Anders


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Kunjarteer
Sent: den 17 april 2007 00:16
To: wireshark-users@xxxxxxxxxxxxx
Subject: Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP

Hi all,

 My apologies for the double post, I didn't realize my first email had gotten through.

I've attached an example trace file, I'm using Wireshark version 0.99.5. 

Thank you,

Kunjar

On 4/16/07, Kunjarteer <kunjarteer@xxxxxxxxx> wrote:
Hi,

 I'm having problems getting MMS to decode properly when its transported over the COTP/TPKT/TCP protocol stack. The 'data' in the COTP payload is never decoded. I've tried using 'decode as' but MMS does not appear on the protocol list even thought it is enabled. MMS is decoded fine with other traffic I have which is over OSI presentation layers. Is there a way I can enable the dissectors to decode MMS when its sent directly over COTP?

Thank you,

Kunjar Singh

  • References:
    • [Wireshark-users] Decoding MMS/COTP/TPKT/TCP
      • From: Kunjarteer
    • [Wireshark-users] Decoding MMS/COTP/TPKT/TCP
      • From: Kunjarteer
    • Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP
      • From: Kunjarteer
  • Prev by Date: Re: [Wireshark-users] Configure libpcap
  • Next by Date: Re: [Wireshark-users] Configure libpcap
  • Previous by thread: Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP
  • Next by thread: [Wireshark-users] UDP Fragmentation Porblem
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation