Wireshark-users: Re: [Wireshark-users] iptv multicast stream
From: "Jemec Miha" <m.jemec@xxxxxxxxxxx>
Date: Tue, 1 Apr 2008 08:58:40 +0200

Hi Martin!

 

What I found out is, that latest version of Wireshark doesn't work correctly with this part of code. I don't know what has been changed in the last versions, but I tried with 0.99.5 and it works well.

 

The Multicast stream options checks for multicast streams by comparing the first 3 bytes of destination MAC address: if it equals to 01:00:5e, then the packet is recognized as multicast packet. Your packets fit well inside this rule.

 

I don't know what is wrong, could be something with the tap system, I will try to check. Meanwhile you can use one older version.

 

Miha

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Marty Sorensen
Sent: Monday, March 31, 2008 10:49 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] iptv multicast stream

 

Hello,

Im trying see if WireShark supports iptv multicast streams to analyse, just like on VoIP RTP streams.
http://wiki.wireshark.org/Multicast_streams

The stream show's 10sec of public tv, non crypted, played with VLC but cant see anything in WireShark :-/
http://martin.damberg.person.emu.dk/iptv/DR1.pcap

Is this supported at all ? maybe in the future ? Looking desperately after something, opensource and free, to analyse on iptv
multicast streams after bugs/freezes and etc.

Martin
Denmark