First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

SML dissector doesn't work

  • retag add tags

Hello,

I try to comprehend this example:

https://wiki.wireshark.org/SML

But for me the dissector dosn't work. I've uploaded a screenshot

Does somebody has an idea?

Michael's avatar
1
Michael
asked 2019-11-14 10:52:35 +0000
Guy Harris's avatar
19.9k
Guy Harris
updated 2019-11-14 19:26:31 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You need to set the dissector port (defaults to 0), either by editing the dissector preferences (Edit -> Preferences -> Protocols -> SML) or by right clicking any packet in the list and selecting "Decode As..." (or from the menu Analyze -> Decode As...) and choosing TCP port 7259 (for the example capture).

grahamb's avatar
23.8k
grahamb
answered 2019-11-14 11:19:17 +0000, updated 2019-11-14 11:19:27 +0000
edit flag offensive 0 remove flag delete link

Comments

Thank you for the fast reply.

Now that works for me. But how do I act in case of an offline file without a tcp frame?

Michael's avatar Michael (2019-11-14 11:59:18 +0000) edit

The SML dissector only dissects traffic over UDP or TCP.

You can use text2pcap to create a pcap file. By using the option -T along with suitable source and destination ports, e.g. -T 3293,7259 to match that in the sample file.

grahamb's avatar grahamb (2019-11-14 12:16:20 +0000) edit

works also great. Big thanks to you, for supporting me.

Michael

Michael's avatar Michael (2019-11-14 13:03:24 +0000) edit

But how do I act in case of an offline file without a tcp frame?

Do you mean an offline file whose contents are as shown in the Wireshark Wiki SML page, with the first four bytes being 0x1b, followed by 4 bytes of version number, followed by a sequence of messages?

Guy Harris's avatar Guy Harris (2019-11-14 19:28:49 +0000) edit

yes, that's exactly what I mean.

Michael's avatar Michael (2019-11-15 07:06:28 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer