Yes, TN3270E is set very early on in the connection, by
Server -> Client: Telnet Command DO TN3270E ff fd 28
Client -> Server Telnet Command WILL TN3270E ff fb 28
But maybe a good hack would be to display Telnet Data as EBCDIC if it is
followed by a Command End of Record (ff ef). Does anyone but
TN3270/TN3270E use End of Record?
On a commercially available protocol analyzer, ANSI/EBCDIC decodes in the
hex dump panel can be overridden by a right mouse click.
And yes, the ultimate ideal would be full dissection of the 3270 data
stream, but at least displaying the data would be good.
Wrolf Courtney
Donovan Data Systems, Inc.
(212) 633-5470
Guy Harris
<guy@xxxxxxxxxxx To: wrolf.courtney@xxxxxxxxxxxxxxx
u> cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Display TN3270E data as EBCDIC
01/12/2004 10:20
PM
On Jan 12, 2004, at 9:30 AM, wrolf.courtney@xxxxxxxxxxxxxxx wrote:
> Is there any way to display TN3270E data as EBCDIC, other than with
> Analyze
> -> Follow TCP Stream -> EBCDIC?
Currently, no.
That might require a preference setting in the Telnet dissector - I
think the TN3270-ness of a Telnet connection is established by option
negotiation early in the session, but the capture might not include
that. (What it *really* requires is a per-connection setting, but we
don't have the infrastructure to support that.)
That setting could also enable dissection of 3270 data streams (which
is what I assume get sent over the connection).