Wireshark · Ethereal-dev: Re: [Ethereal-dev] Small SIP patch

[Ruud Linders <moztest@xxxxxxxxxxxxxxxxxxxx>]

Guy,

Good point, currently we are using a hack in packet-sctp which checks
for PPI=0  (=NOT_SPECIFIED_PROTOCOL_ID) and just calls the sip decoder.
The src/dst port is both 1 which is also not very distinctive so that
would leave a heuristic approach.

	Ruud

Guy Harris wrote:
> On Thursday, July 31, 2003, at 3:48 AM, Ruud Linders wrote:
>
> > A small update to the SIP-decoder.
>
>
> Checked in.
>
> > - Registers the SIP decoder so it can be called from other protocols 
> > (i.e. SCTP)
>
>
> When would the SCTP dissector call it?  Would that be based on an SCTP 
> port number or an SCTP PPI (in which case the SIP dissector should 
> register itself in the appropriate dissector table), or based on looking 
> at the SCTP payload to see if it looks like SIP (in which case SCTP, 
> like UDP and TCP, needs a heuristic dissector table, and the 
> "dissect_sip_heur()" dissector should be registered in that table), or 
> based on something else?