On Wed, 2006-03-01 at 10:22 -0700, Clinton Work wrote:
> Here is a link to some documentation on what the mpeg2 patch can decode
> and how it was intended to be used. The mpeg2 dissector was designed to
> read an mpeg2 transport/program stream from a file versus IPV4 UDP
> or RTP.
> http://student.cosy.sbg.ac.at/~lfindeis/ethereal_mpeg2_docu.pdf
>
> Its been a while since I looked at the dissector, but it expects to
> be passed a 188 byte transport stream datagram. Most MPEG2 over UDP
> streams pack multiple 188 byte transport stream datagrams into one UDP
> packet. A new dissector needs to be written for MPEG2 TS over UDP and
> then hand the 188-byte transport streams to the mpeg2 dissector.
Yes AFAIK all MPEG2 Transport Streams must use a 188byte frame size
(with multiple frames in a network packet). The patch has most of the
things needed, it just doesn't comply with Ethereal coding and
portability standards. I a m currently bending it into shape so it at
least applies to the SVN sources, after that the cleaning up is going to
happen.
With my current working load i hope to get this done in the next couple
of days.
> As somebody pointed out, mpeg2 TS over RTP is common as well. I can
> provide captures for both if people want examples to decode.
A few captures would be helpful, just as a second-source reference. If
you just could put them on a website somewhere that would be great.
- Erwin
