Wireshark-bugs: [Wireshark-bugs] [Bug 10933] "Decode as" don't work well for modbus
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Fri, 06 Feb 2015 18:09:48 +0000

changed bug 10933


What Removed Added
Status UNCONFIRMED CONFIRMED
CC   mmann78@netscape.net
Ever confirmed   1

Comment # 4 on bug 10933 from 
Assuming the SYN/ACK of the underlying TCP stream is captured, is there a way
to do this with "conversation data"?

The problem (as the comments in the dissector state) is that there isn't enough
information in the packet itself to determine request/response (Modbus is a
very simple protocol), so the dissector is trying to determine it with
source/destination port which won't be reliable if you don't use the standard
(or preferenced) port.

"Decode As" doesn't really provide any data to help clarify that.

You are receiving this mail because:
  • You are watching all bug changes.