First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Help decoding an FTAM capture from a synchronous line, using LAPB encapsulation

I have several captures (.cap files) performed with our own physical device. In the past (versions of 2007!) Wireshark could decode LAPB/X.25/FTAM on this file. I'm using the same capture file from then, but can not figure out how to force Wireshark to do the decode.

Any ideas? I could send copies of the .cap file and also printouts from Wireshark with the decode.

Thanks in advance for any help.

Hernando Convers Advanced Relay Corp.

Hconvers's avatar
1
Hconvers
asked 2024-01-08 20:34:33 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Can you place a capture file on a public file share and update the question with a link to it.

Chuckc's avatar Chuckc (2024-01-08 23:05:09 +0000) edit

Please find a sample capture file for this case at https://drive.google.com/file/d/1_oJ3...

A printout from a very old Wireshark shows how it decoded some of the frames, here: https://drive.google.com/file/d/11lTy...

This is what I am looking for... being able to decode as it did in the past.

Thanks for any help!

Hconvers's avatar Hconvers (2024-01-10 18:47:29 +0000) edit
add a comment see more comments

1 Answer

0

Will you (please) open an issue for this on Wireshark Gitlab Issues?
It looks like it came in with 12173: x75: Add dissector for X.75 SLP/MLP.
Try a Wireshark from the 4.0 branch (I tested with 4.0.12) - the decode looks like your test1.txt.

Chuckc's avatar
3k
Chuckc
answered 2024-01-10 20:58:52 +0000
edit flag offensive 0 remove flag delete link

Comments

Will do.

Thanks for the advice. I'll try with v4.0.12 later. hc

Hconvers's avatar Hconvers (2024-01-10 23:01:36 +0000) edit

Filed as issue #19595.

Guy Harris's avatar Guy Harris (2024-01-16 01:00:56 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer