Hi Martin!
What I found out is, that
latest version of Wireshark doesn't work correctly with this part of code. I
don't know what has been changed in the last versions, but I tried with 0.99.5
and it works well.
The Multicast stream
options checks for multicast streams by comparing the first 3 bytes of destination
MAC address: if it equals to 01:00:5e, then the packet is recognized as
multicast packet. Your packets fit well inside this rule.
I don't know what is wrong,
could be something with the tap system, I will try to check. Meanwhile you can
use one older version.
Miha
From:
wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Marty Sorensen
Sent: Monday, March 31, 2008 10:49
AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] iptv
multicast stream
Hello,
Im trying see if WireShark supports iptv multicast streams to analyse, just
like on VoIP RTP streams.
http://wiki.wireshark.org/Multicast_streams
The stream show's 10sec of public tv, non crypted, played with VLC but cant see
anything in WireShark :-/
http://martin.damberg.person.emu.dk/iptv/DR1.pcap
Is this supported at all ? maybe in the future ? Looking desperately after
something, opensource and free, to analyse on iptv
multicast streams after bugs/freezes and etc.
Martin
Denmark