["Martin Regner" <martin.regner@xxxxxxxxx>]

Martin Regner wrote:
>
> Another way could maybe be to use tethereal and the "-d " decode as
option, maybe
> something like "-d llc.dsap==200,sna" will work.
>

It seems it is not working with the latest versions of Ethereal at least. I
have tried with 0.10.2 (on Windows).
I get a crash if I try to use -d option with llc.dsap, ppp.protocol and
maybe also for some other layer types.

The crash occurs in wpan/proto.c proto_get_id(..).

It seems that several other layer types are working:, e.g.
-d http.port==XX,p
-d sctp.port==XX,diameter
-d sctp.port==XX,m2pa
-d sctp.port==XX,m3ua
-d m3ua.protocol_data_si==XX,bicc
-d m3ua.protocol_data_si==XX,sccp
-d m3ua.protocol_data_si==XX,isup
-d osinl==XX,clnp
-d osinl==XX,esis
-d rtp.pt==XX,rtpevent
-d rtp.pt==XX,h261

and several others.