Ethereal-dev: [Ethereal-dev] filtering out SCTP chunks

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Wed, 12 Feb 2003 17:02:35 -0500
Hi list,

I just tried this filter on an SCTP capture I have:

sctp.chunk_type != 0 && sctp.chunk_type != 3
(I'm only really interested in the control messages at the moment--thus I want to filter out the DATA and SACK chunks.)
What I got surprised me: SCTP messages that had just DATA or just SACKs were excluded from the display, but messages that had DATA and SACKs bundled together were displayed.
Is this "correct"? If not, do you think it's a "packet-sctp.c" problem or a filter code problem? 

Regards,
-Jeff

ps.  this is with 0.9.9 + a couple non-related patches.

--
Jeff Morriss
Senior Software Support Engineer
Ulticom, Inc.
Helpdesk: +1-856-787-2765
Fax: +1-856-222-9947