Ethereal-dev: Re: [Ethereal-dev] Small SIP patch

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ruud Linders <moztest@xxxxxxxxxxxxxxxxxxxx>
Date: Fri, 01 Aug 2003 11:18:44 +0200

Guy,

Good point, currently we are using a hack in packet-sctp which checks
for PPI=0  (=NOT_SPECIFIED_PROTOCOL_ID) and just calls the sip decoder.
The src/dst port is both 1 which is also not very distinctive so that
would leave a heuristic approach.

	Ruud

Guy Harris wrote:

On Thursday, July 31, 2003, at 3:48 AM, Ruud Linders wrote:

A small update to the SIP-decoder.


Checked in.

- Registers the SIP decoder so it can be called from other protocols (i.e. SCTP)


When would the SCTP dissector call it? Would that be based on an SCTP port number or an SCTP PPI (in which case the SIP dissector should register itself in the appropriate dissector table), or based on looking at the SCTP payload to see if it looks like SIP (in which case SCTP, like UDP and TCP, needs a heuristic dissector table, and the "dissect_sip_heur()" dissector should be registered in that table), or based on something else?