Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 6248] SIP multipart mixed bodies are not always correctly

Date: Fri, 26 Aug 2011 06:25:17 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6248

--- Comment #12 from Jaap Keuter <jaap.keuter@xxxxxxxxx> 2011-08-26 15:25:16 CEST ---
(In reply to comment #11)
> Created an attachment (id=6872)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6872) [details]
> SIP REGISTER with one body
> 
> Hi,
> 
> but when there is just one part (i.e. no multipart mixed body), the Content
> Type may be something else than "text/plain", and the display is OK. So I
> really don't understand why it would be different in a multipart mixed case.

Thanks for the sample capture(s).

This reveals that the SIP dissector is somewhat imprudent with regards to the
body contents. As opposed to the media dissector, which is employed by the
multipart dissector to handle the media types it can't find in its own and
media-type subdissector table. 

Since the media dissector is much more generic (used as the default go-to guy
when nothing else is available) than the SIP and multipart dissectors, there's
no easy safe solution as in 'dump it as text'. Likewise the SIP dissector
should take heed from this fact.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.