https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3277
--- Comment #3 from Jaap Keuter <jaap.keuter@xxxxxxxxx> 2012-09-23 07:37:15 PDT ---
What you're picking up here is the originating party is not completing the SIP
transactions. Try looking at flow of a rejected call.
INVITE ->
<-TRYING
<-STATUS 403
[->ACK] is missing, so retry
<-STATUS 403
[->ACK] is missing, so retry
etc.
Yeah, that screws up the numbers.
The dissector knows, since it marks them as "Suspected resend of frame". Now if
only the tap listener knew.
So, no your fix doesn't help. You'll miss out the call that aren't completed
before the capture stops, is my guess.
--
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.