Ramesh wrote:
>I am using Ethereal version 0.9.11 (March 10th,2003) on my Windows XP
>platform. Ethereal does show me the SIP protocol messages but did not show
>the BYE message which is specific to the latest RFC 3261.
>
>Are there are plans for ethereal to support RFC 3261 and if yes, when?
The BYE method seems to be supported in the SIP dissector and it seems that all other methods from RFC 3261 are implemented in the SIP dissector.
It also seems that all header fields from RFC 3261 is implemented in the dissector (but maybe not
the compact forms, e.g. "i" instead of "Call-ID"), what I could see.
ftp://ftp.rfc-editor.org/in-notes/rfc3261.txt
Not all methods and header fields in all SIP extensions are currently implemented in the SIP dissector.
http://www.iana.org/assignments/sip-parameters
The BYE request in http://aa-security.de/dumps/sip.cap.gz seems to be decoded correctly by Ethereal 0.9.11, so there seems not to be a general problem with the BYE method.
The sip.cap.gz capture may however not be RFC 3261 compliant.
Is the message shown just as a UDP/TCP message, or don't you see it at all?
Could you maybe send a sample capture that illustrates the problem with the BYE message if
you see it just as UDP/TCP?
If you don't see the message at all:
Could the problem be that the message isn't matching the filter you are using or similar?
Are you sure that there is a BYE message?