Wireshark-users: [Wireshark-users] Filtering SCTP message contents
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Emre UZUNCA <euzunca@xxxxxxxxx>
Date: Wed, 3 Sep 2008 23:42:13 -0700 (PDT)
Hi,
 
When bundling is used for SCTP messages, filter conditions are checked in the full SCTP message content. For example, if 2 M3UA messages are bundled in a single SCTP message, the filter specifed as (m3ua.protocol_data_opc == 10000)   && (m3ua.protocol_data_dpc== 10001)   is satisfied when the first M3UA message has m3ua.protocol_data_opc == 10000 and the second has m3ua.protocol_data_dpc== 10001. Is there a way to make the filter check only the same M3UA message contents?
 
Thanks,
Emre