Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Decoding SIP Publish Messages

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 2 Jun 2010 14:32:04 -0700
On Jun 2, 2010, at 1:07 PM, Duncan, Lisa M (Lamanna) wrote:

>  Is anyone aware of a dissector or external tool that will decode a SIP Publish message?  These messages are showing up as IP fragments when loading a capture file.

Do you have the "Reassemble fragmented IP datagrams" preference turned on for the IP protocol?  If not, turn that on, and see whether the messages are dissected.