This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is there a way to get Wireshark to provide SNMP dissection on non-standard ports (e.g. 163, 165, etc.) rather than the standard ports of 161 and 162

0

I have Wireshark performing SNMP dissection of custom MIB. This works great on the standards SNMP ports of 161 and 162. However, when I setup an SNMP agent to use non-standard ports like 163 and 164, multiple agents on a single IP, Wireshark no longer provides SNMP decode. How can I add several ports to provide SNMP dissection for display?

asked 05 Mar '12, 16:25

bob2oneil's gravatar image

bob2oneil
1111
accept rate: 0%


One Answer:

0

Sure, just take a look at the first example : http://wiki.wireshark.org/Lua/Examples
Replace port numbers and dissector and you should be good.

Otherwise, simply use "Decode As" on a file by file basis.

answered 05 Mar '12, 16:41

yul_analyzer's gravatar image

yul_analyzer
6558
accept rate: 0%

edited 05 Mar '12, 16:53