Dear Wireshark Community
I stumbled over a trace file with an non-standard version of IP over LLC. Wireshark can decode regular IP over LLC, if the organization code is set to zero:
Logical-Link Control
DSAP: SNAP (0xaa)
SSAP: SNAP (0xaa)
Control field: U, func=UI (0x03)
Organization Code: 00:00:00 (Officially Xerox, but
Type: IPv4 (0x0800)
Alas, in my trace file the organization code is specific to the manufacturer Hirschmann:
Logical-Link Control
DSAP: SNAP (0xaa)
SSAP: SNAP (0xaa)
Control field: U, func=UI (0x03)
Organization Code: 00:80:63 (Richard Hirschmann Gm
Protocol ID: 0x0800
Does anybody have an idea, how to get Wireshark to to treat this as IP?
All hints are appreciated
Eddi