Wireshark-users: Re: [Wireshark-users] mpeg ts - why info column is empty sometimes
On 08/31/15 14:48, Ran Shalit wrote:
Hello,
I try to analyze mpeg-ts file.
It is strange that the info column is sometimes empty.
Does anyone knows why ?
This is the sample I'm trying to analyze, though I see the issue in
every ts file.
[https://drive.google.com/file/d/0B22GsWueReZTUmJrVGd6WjRSTEU/view?usp=sharing][1]
For the most part the Info column is empty because most of the frames
are reassembled into a subsequent frame (you can see that in the Packet
Details). Most other dissectors tell you when they don't do much
dissection because the frame has been reassembled so I submitted a
change[1] to do the same in the MP2T dissector.
I also submitted a separate change so the MPEG-PES dissector tells you
when it encounters an unknown stream or frame type[2] (this accounts for
a few of the empty Info columns in that capture file).
Of these two issues, only the latter (unknown streams) might indicate
something wrong with the data you're analyzing.
[1] https://code.wireshark.org/review/10471
[2] https://code.wireshark.org/review/10472
