Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] MPEG2TS over UPD not decoded

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Jake Peavy" <djstunks@xxxxxxxxx>
Date: Tue, 4 Dec 2007 03:36:07 -0700

TYVM :-)

 
On 12/4/07, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:
Hi,

Committed revision 23743 adding UDP transport for MPEG2TS, both
heuristic and "Decode as".

Thanx,
Jaap


Jake Peavy wrote:
> On 12/3/07, *maurizio simoni* <mau2000.sim@xxxxxxxxx
> <mailto:mau2000.sim@xxxxxxxxx >> wrote:
>
>     MPEG2TS can be also detected in a heuristic way if transported over UDP.
>     These are some rules that can be applied:
>     1) UDP payload length must be a multiple of 188 (usually a UDP
>     packet contains an integer number of TS packets, where each TS
>     packet is 188 bytes).
>     2) The first octet of each TS packet inside the UDP payload must be
>     equal to 0x47 (sync byte)
>     3) At least 2 or 3 consecutives UDP packets satisfying rules 1) and
>     2) onthe same IP address and UDP port.
>     <http://www.wireshark.org/mailman/listinfo/wireshark-users >
>
>
> I see heuristic detection of MPEGTS as a Step 2 of this process.
>
> In the meantime I have no problem manually instructing Wireshark to
> Decode As... but the question remains - how to have Wireshark dissect
> MPEGTS payloads in UDP encapsulated streams?  Nobody has answered this
> question.  MPEGTS is not in the list of available dissectors though it
> works "out of the box" on RTP encapsulated streams.
>
> --
> -jp
>

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users



--
-jp


When Chuck Norris was in middle school, his English teacher assigned an essay: "What is Courage?" Chuck Norris received an "A+" for writing only the words "Chuck Norris" and promptly turning in the paper.
  • References:
    • Re: [Wireshark-users] MPEG2TS over UPD not decoded
      • From: maurizio simoni
    • Re: [Wireshark-users] MPEG2TS over UPD not decoded
      • From: Jake Peavy
    • Re: [Wireshark-users] MPEG2TS over UPD not decoded
      • From: Jaap Keuter
  • Prev by Date: [Wireshark-users] need a camel/inap phase 4 trace
  • Next by Date: Re: [Wireshark-users] Capturing packets for given ip address
  • Previous by thread: Re: [Wireshark-users] MPEG2TS over UPD not decoded
  • Next by thread: [Wireshark-users] IEEE 802.11 wpa-pwd seems to break if I add a time reference (using 0.99.6)
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation