Wireshark automatically decode the packets if they are sent on port 161. Is there a way to configure Wireshark to do the decoding if packets are sent to a different port? I have a non responsive device that is supposedly using SNMP messages on port 300. I would love to have access to the decoded payload when I send my commands to port 300. TIA, Eddie asked 18 Jul '14, 09:38 Eddie88 |
One Answer:
Right click a packet, Choose "Decode As ..", select the transport tab and the appropriate port in the drop list (depends on whether you picked an snmp query or response) and then choose SNMP in the protocol list (you can select an entry in the list and type s and then n then m to get there easily). Click Close. Job done. answered 18 Jul '14, 09:50 grahamb ♦ |
Thanks, that was really easy. Learned something new!
Cheers, Eddie
Normally you accept a helpful answer by clicking the checkmark icon next to the answer rather than giving away your points. I've awarded yoiur points back to you. See the FAQ for more info.