This is our old Q&A Site. Please post any new questions and answers at

What setting we have to do to capture mms(manufacturing message specification) on wire shark?

asked 20 Jan '12, 05:04

tod's gravatar image

accept rate: 0%

The same settings you need to capture any other type of traffic; the only way the protocol would matter when capturing traffic would be if you were using a capture filter. The Wireshark dissector for MMS expects it to run atop the OSI Connection-Oriented Transport Protocol (COTP), and that's expected to run atop the OSI Connectionless Network Protocol, the TPKT protocol atop TCP, X.25, or IPv4/IPv6. If you're using a capture filter, it would have to be one that would see the traffic with whatever encapsulation is being used.

Note, however, that just because Wireshark captures a particular protocol, that doesn't mean it'll recognize the traffic as being that protocol. If you're not seeing that traffic in Wireshark, it might be because it's not recognizing the MMS traffic; see, for example, this other question wherein somebody wasn't seeing MMS traffic when they should have been - the problem was that Wireshark didn't see the initiate-request and initiate-response packets so it didn't have enough context information to realize that the protocol running atop the OSI Presentation Protocol was MMS.

permanent link

answered 20 Jan '12, 17:02

Guy%20Harris's gravatar image

Guy Harris ♦♦
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 20 Jan '12, 05:04

question was seen: 7,050 times

last updated: 20 Jan '12, 17:02

p​o​w​e​r​e​d by O​S​Q​A