Wireshark-users: [Wireshark-users] Decode As dialog doesn't offer SMB

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: "John Walsh" <johnwalshnewsgroup@xxxxxxxxx>
Date: Fri, 21 Nov 2008 17:11:12 -0500

Greetings,


I'm a new user to wireshark. It rocks.


I'm working with an open source CMS (Alfresco) that provides a SMB interface. We have it configured to listen to port 1445 instead of 445. We handle the port forwarding to get the traffic to 1445.


I'm using dumpcap to capture edump files on the server for later examination on a development box. When I select Analyze -> Decode As, click the Transport tab of the Decode As dialog, and select source (1445) as the TCP setting, SMB isn't one of the choices in the protocol list. Should it be? Can I do something to make it appear? How should I tell wireshark to treat 1445 traffic as SMB?


Thanks!

John Walsh