[Pascal Quantin <pascal@xxxxxxxxxxxxx>]

Hi,

Le mar. 3 mars 2020 à 09:26, Vikas Theng <thengvikas2017@xxxxxxxxx> a écrit :

Hello,

I have dissected exported pdu successfully over udp. but I need to dissect it over ethDev. sctp and gtp  is it possible? . because same heuristics I am using to dissect, but it is not working. Can we form exported pdu only over UDP ?

The exported PDU format is NOT over UDP, as seen in the pcap I shared previously. It's an encapsulation type that does not run over any transport protocols. It's a mechanism allowing to call any dissector without the need to have an encapsulation in lower layer packets.

The MAC-NR heuristic dissector can also run over UDP, as explained in https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob;f=epan/dissectors/packet-mac-nr.h;hb=refs/heads/master. It does not run over over protocols.

Best regards,

Pascal.

On Fri, Feb 28, 2020 at 4:06 PM Vikas Theng <thengvikas2017@xxxxxxxxx> wrote:

Thanks for your help.

On Fri, Feb 28, 2020 at 3:23 PM Pascal Quantin <pascal@xxxxxxxxxxxxx> wrote:

Hi Vikas,

Le ven. 28 févr. 2020 à 10:43, Vikas Theng <thengvikas2017@xxxxxxxxx> a écrit :

Hello al,

I am trying to form mac-nr exported pdu. but getting some warning  " Can't dissect NR MAC frame because no per-frame info was attached!". same warning for both heuristics and without heuristics.  Help me regarding this issue.  please find attachment.

I already explained you what was wrong in https://www.wireshark.org/lists/wireshark-users/202002/msg00007.html and https://www.wireshark.org/lists/wireshark-users/202002/msg00009.html. See the attached pcap for an example that should help you getting autonomous.

Ensure that the mac_nr_udp heuristic dissector is activated (Analyze -> Enabled Protocols -> check mac_nr_udp box).

Best regards,

Pascal.

On Fri, Feb 28, 2020 at 10:16 AM Vikas Theng <thengvikas2017@xxxxxxxxx> wrote:

Hello all,

 I need to form exported pdu for mac-nr. any possible help is appreciated. 

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe