I just implemented the export_pdu tap for Diameter as well as SIP to my
surprise if I don't define
a filter only SIP packets get experted from a file with both Diameter
and SIP. If I specify a filter of
"diameter or SIP" both gets exported. I would have expected both to be
exported with no filter. Could any one shed
some light on what's going on?
Diameter isn't queuing messages to the tap when !tree. Need to either
lose this line in dissect_diameter_common():
1082 if (!tree) return;
or move the tap queuing before it.
Doh, should have thought about that. Will look into it tomorrow.