TPKT decode to MMS is not working in latest versions 4.4.6

asked 2025-05-15 13:23:53 +0000

Hi team,

I am facing a unique issue when using wireshark version 4.4.6 in terms of decoding TPKT packets to MMS. I tried enabling the MMS protocols, and also adding context in PRES but all in vain. Can anyone help me in this context, my colleague was able to open the same file with an older version of 3.2.1

edit retag flag offensive close merge delete

Comments

Can you try with the sample capture (mms.pcap.gz) from the Wireshark Wiki

Chuckc ( 2025-05-15 14:09:15 +0000 )edit

Thanks Chuckc, This is the very same sample capture I was verifying to test the MMS packets from Wiki

[email protected] ( 2025-05-16 06:05:53 +0000 )edit

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2025-05-16 06:22:12 +0000

[email protected]
1 ●1

I finally figured out a solution for this issue. With the new release it seems that the software checks many options by default. When verified COTP protocol it was found that "Decode ATN TPDUs" option was checked. This options forces Wireshark to consider all COTP packets as Aviation traffic and hence blocking MMS parsing. Unchecking this box helped decode COTP to MMS and now its working well.

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2025-05-15 13:23:53 +0000

Seen: 39 times

Last updated: May 16

TPKT decode to MMS is not working in latest versions 4.4.6 edit