1 | initial version |
This is a really old message... So if you are still looking for an answer: - I can record only messages on port 2404. why? If by records you means filter: Because 2404 is the port that 104 should use according protocol Specification.
But Wireshark is made by a lot of smart people who understand that you could need another port and so you can defined port use by 104 in: Edit / Preferences / Protocols / IEC 60870-5-104.
As soon as you preferences are set you should be able to export (and so record) filtered frames. I hope I have answered your question. If I misunderstood it, sorry... please provide more details. BR