Wireshark-users: Re: [Wireshark-users] Decoding SIP Publish Messages
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 2 Jun 2010 14:32:04 -0700
On Jun 2, 2010, at 1:07 PM, Duncan, Lisa M (Lamanna) wrote:

>  Is anyone aware of a dissector or external tool that will decode a SIP Publish message?  These messages are showing up as IP fragments when loading a capture file.

Do you have the "Reassemble fragmented IP datagrams" preference turned on for the IP protocol?  If not, turn that on, and see whether the messages are dissected.