Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP

From: "Anders Broman \(AL/EAB\)" <anders.broman@xxxxxxxxxxxx>
Date: Mon, 23 Apr 2007 11:37:03 +0200
Hi,
The problem here is that you must capture the setup part where the tie to MMS OID is made.
Best regards
Anders


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Kunjarteer
Sent: den 17 april 2007 00:16
To: wireshark-users@xxxxxxxxxxxxx
Subject: Re: [Wireshark-users] Decoding MMS/COTP/TPKT/TCP

Hi all,

 My apologies for the double post, I didn't realize my first email had gotten through.

I've attached an example trace file, I'm using Wireshark version 0.99.5. 

Thank you,

Kunjar

On 4/16/07, Kunjarteer <kunjarteer@xxxxxxxxx> wrote:
Hi,

 I'm having problems getting MMS to decode properly when its transported over the COTP/TPKT/TCP protocol stack. The 'data' in the COTP payload is never decoded. I've tried using 'decode as' but MMS does not appear on the protocol list even thought it is enabled. MMS is decoded fine with other traffic I have which is over OSI presentation layers. Is there a way I can enable the dissectors to decode MMS when its sent directly over COTP?

Thank you,

Kunjar Singh