This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Decoding problem

0

I have collected *.pcap file (It is contains PTP 1588v2 Sync messages framed on IP/UDP). This file is decoded/recognized correctly (in terms of protocols, destination IP address etc) on one laptop, when if runs on second laptop doesn’t decode protocols and IP (in this case I have noted that under menu Analyze/ Decodes As seems not enable). Both wiresharek and WinCap versions are the same 1.12. Thanks

asked 26 Feb '16, 01:24

LSM's gravatar image

LSM
6●1●1●2
accept rate: 0%

One Answer:

0

I know this question is a few months old now, but if it's still unresolved, I'd recommend checking and comparing your preferences and decode_as_entries files on the two laptops. These files can be found in the "Personal configuration" folder, which you can locate via: "Help -> About Wireshark -> Folders -> Personal configuration".

If after that you still can't figure out why Wireshark won't decode the packets as PTP on one laptop, then you could try posting a capture file and provide a link so others can take a look at it.

answered 21 Jul '16, 09:38

cmaynard's gravatar image

cmaynard ♦♦
9.4k●10●38●142
accept rate: 20%