Wireshark · Wireshark-users: Re: [Wireshark-users] Problem with decoding K12xx/K15 rf5 files

[Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>]

Marcin Jastrzebski wrote:
> Hi,
> I'm trying to use Wireshark  (ver. 1.0.5) to decode Tektronik K12xx/K15 
> rf5 files. I configured Wireshark as described in Wiki - 
> http://wiki.wireshark.org/K12; and it works fine for most of the files. 
> But occasionally I'm getting files  which were recorded on an HSL 
> interface (High Speed Interface as defined in Q.703 Annex A). It looks 
> like Wireshark tries to decode them as normal narrowband Q,703 messages 
> and ends up  displaying everything as an unknown MTP3 SNM message.  I've 
> got the  original K12 stack file  and I tried to configure  K12xx 
> protocol preferences by adding a new mapping match=hsl protos=mtp2 but 
> it did not help.
> Do you know if Wireshark can decode HSL as per Q.703 Annex A? If so,  
> how it should be configured to do this correctly?

Try setting the MTP2 preference "Use extended sequence numbers?".  That 
is used to tell the MTP2 dissector you've got HSL.