Ask Your Question

Revision history [back]

How can I get Wireshark to decode ISO SES/PRES/ACSE on top of UDP?

I'm trying to debug an issue on Philips MX40 wireless patient monitors over a Cisco CAPWAP WLAN infrastructure. I have a capture from the AP wired port and Wireshark opens up CAPWAP ok to show the MX40 to PiC traffic. According to Philips doc, the protocol is ACSE ISO 8650 on top of UDP port 24008. I want to decode that UDP port as SES but Wireshark does not give me that protocol option in the "Decode As" window drop down box. Can anyone suggest how to do it?