Hello, wireshark doesn't interpret the SNA payload contained in udp1200x packets when the LLC DSAP value is not 4 or 8. Some implementations use other values (always multiple of 4). In the testcase appended to http://www.cloudshark.org/captures/c1e5e07508f4 the DSAP value in Logical-Link Control is C8. Is there an easy way to 'decode as' SNA ? Thanks asked 30 Jul '13, 07:18 mrEEde2 |
One Answer:
The 0xC8 DSAP is only used for HPR NLP packets flowing towards outdated CS/Win platforms. So filing a bug to wireshark is not worth the effort as this software is no longer supported. The alternative for SNA applications on Windows platforms is to use SNA API clients as outlined in http://www.redbooks.ibm.com/abstracts/redp4998.html?Open answered 01 Jun '14, 00:26 mrEEde |