Wireshark-dev: Re: [Wireshark-dev] [PATCH 2/2] plugins: New MPEG dissector

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 25 Aug 2006 18:25:13 -0700

On Aug 25, 2006, at 1:45 PM, Shaun Jackman wrote:

I've created an MPEG stream decoder for Wireshark. It's useful for
decoding streaming audio. It currently supports MPEG-1, MPEG-2,
MPEG-2.5 audio, layers 1, 2, 3. To test out the protocol decoder, the
first half of the patch adds a wiretap file format to allow opening
your favourite MPEG audio file (mp3 for example). The second half of
the patch adds the protocol decoder. This patch is generated against
wireshark 0.99.2.

The current SVN version of Wireshark has a dissector, epan/dissectors/ packet-mp2t.c, for "RFC 2250 MPEG2 (ISO/IEC 13818-1) Transport Stream dissection".

Does it duplicate what your dissector does, or do they handle different layers of the encoding - for example, should the current dissector call your dissector for MPEG-1 or MPEG-2 payload, rather than just dissecting the payload as an opaque blob, as it does now?

(Erwin - the RFC's title is "RTP Payload Format for MPEG1/MPEG2 Video"; does your dissector handle only MPEG-2, not MPEG-1? Also, the title says "Video", but the abstract says "This memo describes a packetization scheme for MPEG video and audio streams.")