Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3228] SCTP Data Chunks are assumed to be M3UA if SCTP port

Date: Thu, 29 Jan 2009 05:16:43 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3228





--- Comment #3 from Michael Tüxen <tuexen@xxxxxxxxxxxxxx>  2009-01-29 05:16:41 PDT ---
The following explains what is going on in the trace:
Packet 1:
The SCTP dissector looks at the PPID, finds M3UA, looks up a dissector for this
PPID
and find the M3UA dissector. Therefore the SCTP payload is dissected as M3UA.

Packet 2:
The SCTP dissector looks at the PPID, but does NOT find a dissector for
PPID=16, since there
is not yet one. So it tries the port numbers, finds the M3UA dissector and uses
that.

Packet 3:
The SCTP dissector looks at the PPID, but does NOT find a dissector for
PPID=16, since there
is not yet one.So it tries the port numbers, but does not find any dissector.
So it displays
the payload as generic DATA. Please note that this is not a dissector for
RDMA...

If you change in packet 2 the PPID from DD SEGMENT CHUNK to M2UA, the packet
will be
dissected as an M2UA packet.

So I think the dissector does already what you want...


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.