Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2020-05-11 13:20:14 +0000

sajax gravatar image

Found following way to decode it in Wireshark itself without need of command line:

  1. Load the pcap file in Wireshark GUI
  2. Select the "Data Bytes" post "UDP Payload" of any TWAMP Test Frame
  3. Right Click and select "Decode As".
  4. Then add row(s) and mapping the UDP Source and/or Destination port used in Test Frame to "TWAMP.Test"

Using this method it started decoding the TWAMP Frames.

Wireshark version is use is 3.0.7.

PS: Do also ensure that you have enabled TWAMP-Test and TWAMP-Control protocol options from Menu-> "Analyze->Enabled Protocols"

Thanks and Regards Sajax