This is our old Q&A Site. Please post any new questions and answers at

Hello, I'm running Wireshark 2.01 to decode CIP Motion packets. I had this setup working this morning, then suddenly it stopped decoding the UDP port 2222 as CIP Motion. I restarted Wireshark and the computer to no avail. I went back into Decode As and the field I had created disappeared. I went to re-create it, and CIP Motion is not available. I checked the installed and enabled dissectors, and CIP Motion is there and enabled.

Any ideas? I'm about to uninstall and go back to 1.12 and hopefully that works.

Thanks, Jim

asked 02 Feb '16, 10:43

jsmart's gravatar image

accept rate: 0%

edited 03 Feb '16, 05:23

Can you publish the capture (or a few packets of it) and the preferences file from your profile somewhere and put a link to them here?

(03 Feb '16, 06:40) sindy

I think it's probably not Wireshark. I had switched from using a managed switch to a basic hub in trying to see if the switch was blocking some packets. However, when on the hub, it seems Wireshark now sometimes decodes properly and sometimes doesn't.

(03 Feb '16, 07:01) jsmart

I think it's probably not Wireshark.

well, it's probably not Wireshark's configuration, but it may still be something about the contents of some of the packets, which prevents Wireshark from decoding valid packets correctly, as well as really invalid (malformed, blocked) packets. The more the captures from both sources (switch and hub) would be interesting to analyse.

(03 Feb '16, 07:41) sindy
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 02 Feb '16, 10:43

question was seen: 2,061 times

last updated: 03 Feb '16, 07:41

Related questions

p​o​w​e​r​e​d by O​S​Q​A