Wireshark · Wireshark-users: [Wireshark-users] Filtering SCTP message contents

[Emre UZUNCA <euzunca@xxxxxxxxx>]

Hi,

 

When bundling is used for SCTP messages, filter conditions are checked in the full SCTP message content. For example, if 2 M3UA messages are bundled in a single SCTP message, the filter specifed as (m3ua.protocol_data_opc == 10000)   && (m3ua.protocol_data_dpc== 10001)   is satisfied when the first M3UA message has m3ua.protocol_data_opc == 10000 and the second has m3ua.protocol_data_dpc== 10001. Is there a way to make the filter check only the same M3UA message contents?

 

Thanks,

Emre