THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 2
eric-pierre's avatar
1
eric-pierre
updated 2024-03-21 16:38:53 +0000

Hi, Well, I hope you find an answer. But for others who are starting their research here is a tip: ICCP uses the "mms" protocol.

So in Wireshark even if there's no ICCP filter, using "mms" as filter does a pretty good job.

In my case with Wireshark 4.2.3 properly configured (I mean with PRES context set) my ICCP frames are properly decoded.

I hope this helps.

Revision 1
eric-pierre's avatar
1
eric-pierre
answered 2024-03-20 17:46:33 +0000

Hi, Well, I hope you find an answer. But for others over who are starting their there research here is a tip: ICCP uses the "mms" protocol.

So in Wireshark even if there's no ICCP filter, using "mms" as filter does a pretty good job.

In my case with Wireshark 4.2.3 properly configured (I mean with PRES context set) my ICCP frames are properly decoded.

I hope this helps.