ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 8533] tshark "-T fields" output of bundled SCTP chunks doe

Date: Sun, 10 May 2015 21:11:26 +0000

Comment # 3 on bug 8533 from
I took another look at this, and it's actually quite complicated to solve. The
problems are several-fold:

- We don't have any semantic way to properly track multiple PDUs in a single
higher-level frame. This is a deep, long-standing architectural issue that
comes up frequently, but nobody has ever found a good solution for.

- The middle SCTP chunk doesn't even have an "Error-Message" AVP. The AVP is
not "present-but-empty", it's not present at all.

Without solving the first problem (which I like to think of as "semantic
reassembly") I don't think there is any way for us to print the appropriate
extra delimiters at all. We need to be able to count or iterate the sub-frames
somehow, which just isn't possible at the moment.


You are receiving this mail because:
  • You are watching all bug changes.