Wireshark-users: Re: [Wireshark-users] Capture of mixed-mode traffic at MTP3

From: "Luis EG Ontanon" <luis@xxxxxxxxxxx>
Date: Mon, 22 Sep 2008 16:53:18 +0200
I've got plans to add multistandard MTP support...
I had them for quite long time...
I need a regression test suite before I start.

So: multistandard captures (in any format) are very welcome!


On Mon, Sep 22, 2008 at 3:52 PM, Keith E. Fleming <kef762@xxxxxxxxx> wrote:
> Hello. I Have searched the archives but could not find anything on this topic. I have a network that carries ANSI MTP3 over one SCTP port, and ITU MTP3 over another. For now, we have to have two Wiresharks running, each with the different configuration profiles.
>
> Is there a way to do something like what TShark does:
>
> -d sctp.port==2905,mtp3.standard:ITU
> -d sctp.port==2906,mtp3.standard:ANSI
>
> Even the syntax to the right is something I just imagined. I know it doesn't exist like that. It would make analysis immensely easier to have context specific (based on port number) detection of MTP3 standard. Thanks in advance!
>
>
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> https://wireshark.org/mailman/listinfo/wireshark-users
>



-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan