Wireshark-dev: Re: [Wireshark-dev] SCTP association analysis & selection does not work correctl

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Cristian Constantin <const.crist@xxxxxxxxxxxxxx>
Date: Thu, 7 Dec 2023 09:32:27 +0100
Hi Jeff,

Yes, after enabling the respective protocol decoding option, SCTP
association analysis works.
SCTP association analysis is _quite_ slow, though. I'll check why it
is so slow when I have some spare time.

Thanks,
Cristian

On Wed, Dec 6, 2023 at 7:56 PM Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:
>
>
>
> On Wed, Dec 6, 2023 at 12:15 PM Cristian Constantin via Wireshark-dev <wireshark-dev@xxxxxxxxxxxxx> wrote:
>>
>> Hi,
>>
>> I am trying to look at all SCTP associations (lots of them) in an pcap.
>> However, none of the "Analyse/SCTP/..." menu options work correctly.
>> It shows only _one_ association whereas there are many in the pcap.
>>
>> Pls. see an attachment with a screenshot of "Analyse/SCTP/Show All...".
>> What happened? This used to work perfectly...
>
>
> You may (I'm not sure) need to enable Association Indexing (in the SCTP protocol preferences).  This used to be the default behavior but it was made optional for performance reasons.