Re: SCTP De-chunking support

[Michael Tuexen <Michael.Tuexen () lurchi franken de>]

On Jan 10, 2013, at 5:31 PM, vineeth vijay wrote:

> Hi,
>
> Dissection is fine. What I was wondering is whether it is possible to show these individual data chunks as separate 
> frames themselves. 
But they are in the same frame. I really prefer not to show them in a way they
have not been on the wire.
> Hence, when i apply display filter ,  only the chunks with  exact matches should be visible. Is this supported 
> currently?
No. Filtering is based on packets. Not sure how to improve that. We can't show 'half' of a packet.
However, there might be ways to draw your attention to the upper layer packet which matches the
filter.

Best regards
Michael
> Currently , i use the below tool for this purpose:
> http://frox25.no-ip.org/~mtve/wiki/SctpDechunk.html
>
> Regards,
> Vineeth
>
> what problem are you trying to solve? Wireshark supports dissecting the upper layer paylaod
> for bundled DATA chunks for ages...
>
> Best regards
> Michael
> > Vineeth
> > ___________________________________________________________________________
> > Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-dev
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
> >             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>              mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
>
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe