Wireshark mailing list archives

Re: how to second capwap decryptor for tshark


From: balu <balu.enigma () gmail com>
Date: Wed, 4 Jul 2012 15:18:12 +0530

Ok, I understand the problem. But for me decryption of data packets is
sufficient. Just curious is there any work around to decrypt capwap data
packet.
In my case all packets are decrypting assuming as capwap control pkts and
other capwap packets marked as malfunctioned packets. Actually I don't
bother about control packets. So Is there a way to work with capwap data
packet no need of control packets display (I don't bother if it displayed
as malfunctioned packets).

Thank you very much



On Wed, Jul 4, 2012 at 1:34 PM, Guy Harris <guy () alum mit edu> wrote:


On Jul 4, 2012, at 12:24 AM, Guy Harris wrote:

That doesn't mean there are 3 B.A.T.M.A.N. dissectors or two CAPWAP
dissectors, it means either that the code to register them as potential UDP
port dissectors doesn't eliminate duplicate registrations or that the code
to print those registrations doesn't eliminate them.  I'll look at fixing
that bug.

Actually, the problem for CAPWAP is that, even if there's only one
registered protocol and only one dissector source file, there are separate
dissectors for "control" and "data" packets.  Unfortunately, there's no way
to specify which of the dissectors should be used.  (A similar problem
exists for B.A.T.M.A.N.)

This needs more work to fix.




-- 
*******************************
baluenigma.blogspot.com
balaji phaneedra kumar
balu.enigma () gmail com
********************************
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: