Wireshark-users: [Wireshark-users] HowTo decode messages as X.411?
Date: Mon, 12 Jul 2010 16:22:35 +0200
Hi,
how can I decode messages as X411 (P1,P3) using wireshark?
I'm using the latest version 'Development Release 1.4.0rc1' but I cannot find any option like 'decode as X.411 message' within the decode-menu. 

I've found an old patch, howto add this option to the menu (http://www.mail-archive.com/wireshark-dev@xxxxxxxxxxxxx/msg03539.html) but the required entry seems to be already included in my version of './asn1/x411/packet-x411-template.c':

[..]
/* ABSTRACT SYNTAXES */

  x411_handle = find_dissector("x411");
  register_rtse_oid_dissector_handle("2.6.0.2.12", x411_handle, 0, "id-as-mta-rtse", TRUE);
  register_rtse_oid_dissector_handle("2.6.0.2.7", x411_handle, 0, "id-as-mtse", FALSE);

  register_ber_syntax_dissector("X.411 Message", proto_x411, dissect_x411_mts_apdu);
  register_rtse_oid_dissector_handle("applicationProtocol.1", x411_handle, 0, "mts-transfer-protocol-1984", FALSE);
  register_rtse_oid_dissector_handle("applicationProtocol.12", x411_handle, 0, "mta-transfer-protocol", FALSE);
[..]

It would be great, if somebody of you could help me to get this working. Thanks a lot.

Best regards.
tomess
-- 
GMX DSL: Internet-, Telefon- und Handy-Flat ab 19,99 EUR/mtl.  
Bis zu 150 EUR Startguthaben inklusive! http://portal.gmx.net/de/go/dsl