Re: Decoding SIP Publish Messages

[Guy Harris <guy () alum mit edu>]

On Jun 2, 2010, at 1:07 PM, Duncan, Lisa M (Lamanna) wrote:

>  Is anyone aware of a dissector or external tool that will decode a SIP Publish message?  These messages are showing 
> up as IP fragments when loading a capture file.

Do you have the "Reassemble fragmented IP datagrams" preference turned on for the IP protocol?  If not, turn that on, 
and see whether the messages are dissected.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe