Hi Mark, thanks for your comment.
class code 0x72 is reserved for vendor specific classes. This means there should be a meaning to this class code in the context of Rockwell Automation equipment only, so i expect i could find some documentation by Rockwell about it. However, i couldn't find it and so does wireshark can't resolve it. Any suggestions ?