Re: mpeg ts - why info column is empty sometimes

[Jeff Morriss <jeff.morriss.ws () gmail com>]

On 08/31/15 14:48, Ran Shalit wrote:
> Hello,
>
> I try to analyze mpeg-ts file.
> It is strange that the info column is sometimes empty.
> Does anyone knows why ?
> This is the sample I'm trying to analyze, though I see the issue in
> every ts file.
> [https://drive.google.com/file/d/0B22GsWueReZTUmJrVGd6WjRSTEU/view?usp=sharing][1]

For the most part the Info column is empty because most of the frames 
are reassembled into a subsequent frame (you can see that in the Packet 
Details).  Most other dissectors tell you when they don't do much 
dissection because the frame has been reassembled so I submitted a 
change[1] to do the same in the MP2T dissector.

I also submitted a separate change so the MPEG-PES dissector tells you 
when it encounters an unknown stream or frame type[2] (this accounts for 
a few of the empty Info columns in that capture file).

Of these two issues, only the latter (unknown streams) might indicate 
something wrong with the data you're analyzing.

[1] https://code.wireshark.org/review/10471
[2] https://code.wireshark.org/review/10472

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe