X.413 Message Store: Abstract Service (P7)

The P7 protocol allows a mail user agent to send and receive messages through an X.400 message store and the X.400 MTS. It is the X.400 equivalent to the the Internet IMAP protocol, providing services to manage the messages within the message store, rather than having to download them locally.


The P7 message store access protocol was introduced in the X.400(88) version of the standards. It initially provided very limited management facilities, with no support for folders or even storage of submitted messages. These features were gradually introduced in subsequent versions of the standard. However, many P7 user agents still just retrieve the messages and manage them locally, which is more comparable with the POP3 model.

Protocol dependencies

P7 may also optionally use RTSE.

Example traffic

XXX - Add example decoded traffic for this protocol here (as plain text or Wireshark screenshot).


The P7 dissector is partially functional have currently only implemented the message retrieval and message submission services. The administration services, and support for RTSE has not yet been included.

Preference Settings

There is a single preference field for the P7 dissector, the P7 TCP Port - the port to which P7 associations are made. The default value is 102.

Example capture file

XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.

Display Filter

A complete list of P7display filter fields can be found in the display filter reference

Show only the P7 based traffic:


Capture Filter

You cannot directly filter P7 protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.

Capture only the P7 traffic over the non-standard port (103):

 tcp port 103

External links


Imported from https://wiki.wireshark.org/X413 on 2020-08-11 23:27:48 UTC