Wireshark-dev: [Wireshark-dev] Re: sigtran M3UA - retransmitted SCTP data chunks are not decode

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Sat, 17 Aug 2024 12:14:49 -0400
Hi Cristian,

That's expected behavior: if it's a retransmission, the SCTP dissector does not call any upper-layer dissectors, see https://gitlab.com/wireshark/wireshark/-/blob/master/epan/dissectors/packet-sctp.c#L3577

For many/most upper layer protocols, this makes sense: if that upper-layer protocol is stateful, it will probably get confused by seeing a given PDU twice.

It looks like the only way to turn this behavior off would be to turn off TSN analysis in the SCTP dissector (so it won't detect retransmissions at all).

Regards,
-Jeff

On Fri, Aug 16, 2024 at 11:27 AM Cristian Constantin via Wireshark-dev <wireshark-dev@xxxxxxxxxxxxx> wrote:
Hi,

Any idea why? Is there some setting that controls this?

Thanks.
Cristian
_______________________________________________
Wireshark-dev mailing list -- wireshark-dev@xxxxxxxxxxxxx
To unsubscribe send an email to wireshark-dev-leave@xxxxxxxxxxxxx