This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

SNA dissector not called when DSAP 0xc8

0

Hello, wireshark doesn't interpret the SNA payload contained in udp1200x packets when the LLC DSAP value is not 4 or 8. Some implementations use other values (always multiple of 4). In the testcase appended to http://www.cloudshark.org/captures/c1e5e07508f4 the DSAP value in Logical-Link Control is C8. Is there an easy way to 'decode as' SNA ? Thanks

asked 30 Jul '13, 07:18

mrEEde2's gravatar image

mrEEde2
3364614
accept rate: 20%


One Answer:

1

The 0xC8 DSAP is only used for HPR NLP packets flowing towards outdated CS/Win platforms. So filing a bug to wireshark is not worth the effort as this software is no longer supported. The alternative for SNA applications on Windows platforms is to use SNA API clients as outlined in http://www.redbooks.ibm.com/abstracts/redp4998.html?Open

answered 01 Jun '14, 00:26

mrEEde's gravatar image

mrEEde
3.9k152270
accept rate: 20%