Wireshark-dev: Re: [Wireshark-dev] SCTP association analysis & selection does not work correctl

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: John Thacker <johnthacker@xxxxxxxxx>
Date: Fri, 22 Dec 2023 22:45:05 -0500
On Thu, Dec 7, 2023 at 3:32 AM Cristian Constantin via Wireshark-dev <wireshark-dev@xxxxxxxxxxxxx> wrote:
Hi Jeff,

Yes, after enabling the respective protocol decoding option, SCTP
association analysis works.
SCTP association analysis is _quite_ slow, though. I'll check why it
is so slow when I have some spare time.

If you have some time, can you see if https://gitlab.com/wireshark/wireshark/-/merge_requests/13786
works for you and if it's faster (at least the dissection part, this doesn't affect the tapping)? It works
on my samples, and it uses hashmaps instead of lists so it should be better on large files.

Thanks,
John