ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Problems while decoding STUN Binding Request and Responses

From: Pedro Gonçalves <pedro.pandre@xxxxxxxxx>
Date: Fri, 20 Apr 2007 10:23:15 +0100

I'm having some trouble while decoding STUN Binding Request and Responses.
Sometimes they get decoded the right way, sometimes STUN packets are decoded as DNP 3.0, RTP or RTCP (?!).

I'm sending two captures I made so you can check for yourself:
for example, in problems_wireshark_1.pcap, odd packets are STUN Binding Request and even packets are STUN Binding Responses.

Why are the first two packets decoded as DNP 3.0 and the rest of them are decoded ok?

Best Regards

Attachment: problems_wireshark_2.pcap
Description: Binary data

Attachment: problems_wireshark_1.pcap
Description: Binary data