This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Per wireshark - Internals - Dissector tables - Integer tables SNA dissector is being called for LLC SAP 4, 8 12, 64 only.

There are some SNA stacks that receive SNA NLP frames on DSAP 0xc8.

Here is a sample capture file showing SNA NLP traffic in both directions.

sna_nlp.sap_c8.pcapng

Can the 0xC8/200 SAP value be included for SAP dissection ?

How can I dissect those frames using LUA (being a LUA script layman) ?

Thanks and regards Matthias

asked 26 Sep '15, 23:34

mrEEde's gravatar image

mrEEde
3.9k152270
accept rate: 20%

edited 27 Sep '15, 02:28

The link does not work correctly for me...

(27 Sep '15, 00:01) Christian_R

Sorry for this. I updated the link

(27 Sep '15, 02:29) mrEEde

If it's not a user settable item, it should go through the Wireshark bug system. You can file an enhancement bug there, and please attach the sample capture as well. This makes development and test much easier. If it's a simple change as it seems to be, it could be quickly implemented.

permanent link

answered 27 Sep '15, 03:59

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thanks. I opened an enhancement bug 11551 https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11551 .

(27 Sep '15, 06:03) mrEEde
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×4
×3
×3
×1

question asked: 26 Sep '15, 23:34

question was seen: 983 times

last updated: 27 Sep '15, 06:03

p​o​w​e​r​e​d by O​S​Q​A