altcp- how to view protocol
how can i display the protocol ALTCP? can't see this in the list of enabled protocols.
1 Answer
- Sort by
oldest newest most voted
0
The link you point to is the "services" file that Wireshark uses to translate between TCP and UDP port numbers and protocol names. That's a file, in the UNX "services" file format, generated from the IANA Service Name and Transport Protocol Port Number Registry; the appearance of a port number and associated protocol in that file does NOT* indicate that Wireshark supports dissecting the protocol in question.
And, in fact, the only file anywhere in the Wireshark source that mentions ArcLink is the services file; there is no support for dissecting the protocol.
A search for "ArcLink over Ethernet" pops up a bunch of hits about "ArcLink", from Lincoln Electric, for welding equipment (presumably "Arc" as in "arc welding"). A search for "ArcLink over tcp" popped up references both to Lincoln Electric's ArcLink and what I presume is an unrelated protocol for seismic data. The IANA registry indicates that the entry in question refers to Lincoln Electric's protocol.
In order to implement support for ArcLink in Wireshark, we would need a specification for ArcLink.
Comments
The only documentation seems to be about the OUI of the firm: 00:04:EE
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments
There seem to be several definitions for ALTCP. Do you have more information on the protocol?
its' Arclink Over Ethernet as mentioned here. https://github.com/wireshark/wireshar.... Message Header is 10 bytes comprised of Flags(2bytes), Sequence (2 bytes), Last Error (4 bytes) and Data Length (2 bytes). Tnx.
POWER WAVE® MANAGER
"Performing a Wireshark trace with a managed Ethernet switch that can capture all the data is the preferable method, over this trace method."
Maybe they have a plugin available to use with Wireshark.