Wireshark mailing list archives
Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets?
From: Jeff Morriss <jeff.morriss.ws () gmail com>
Date: Fri, 01 Jun 2012 16:15:49 -0400
Richard Sharpe wrote:
On Fri, Jun 1, 2012 at 11:44 AM, Jeff Morriss <jeff.morriss.ws () gmail com> wrote:One of the more frequently asked questions/reported bugs is users filtering for RTP, saving^W exporting those displayed packets, then opening the new capture file only to find plain UDP. This is because the call-setup protocol (e.g., SIP) wasn't included in the display filter. Now we have the ability to mark frames as dependent on others. Should, for example, RTP frames mark the call-setup frames as dependencies? (I noticed that RTP has a Setup Frame field; would one frame really be enough?)An alternative, but more radical approach, might be to export the state that is needed to correctly dissect the packets. We could lobby for an additional application-specific state record in pcap-ng or an application-specific option field. The state could be an asn.1 encoded blob, or whatever.
True. But I like the idea of adding ~1 line of code to the RTP dissector and making all those questions go away. Though I am nervous about this whole packet-dependency thing causing users to say "I filtered on RTP and you saved my SIP too!" ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Jeff Morriss (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Richard Sharpe (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Jeff Morriss (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Anders Broman (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Richard Sharpe (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Gerald Combs (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Andreas Sikkema (Jun 02)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Jeff Morriss (Jun 04)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Jeff Morriss (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Richard Sharpe (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Kukosa, Tomas (Jun 05)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Richard Sharpe (Jun 05)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Jeff Morriss (Jun 01)
- Re: Should payload dissectors' (RTP) packets depend on call-setup dissectors' (SIP) packets? Anders Broman (Jun 01)