> > In the middle of those SCTP/M3UA packets, I also have some
> proprietary
> > packets (UDP based). How can I display the UDP data (as hex
> or ASCII),
> > using colinfo?
>
> By using "-V" - there's no way to do it in single-line
> summary output".
I actually use "-x" to display data as hex and ASCII, which allows me to see
the protocol based on strings.
> > I'm getting a core dump (gdb back trace shows that the stack was
> >
> "tap_push_tapped_queue()/protocolinfo_packet()/proto_alloc_dfi
lter_string()"
> > ).
>
> I've fixed it so that it doesn't drop core, although it still
> won't display stuff. (We could make it display it as
>
> frame[N:M] = XX:XX:XX:XX:XX:XX
Thanks for fixing this. And this output format would be nice. So, if we
specify:
tethereal -r traces.ethereal -z "proto,colinfo,udp,udp"
we will have all udp hex dump included encapsulated protocols
tethereal -r traces.ethereal -z "proto,colinfo,sctp,sctp"
we will have all sctp hex dump included encapsulated protocols
> > Do I need to write a parser for this protocol (just ASCII strings)?
>
> That might more directly get you the output you want.
That's what I thought too :) I'll see how to do this.
Olivier.