> > In the middle of those SCTP/M3UA packets, I also have some > proprietary > > packets (UDP based). How can I display the UDP data (as hex > or ASCII), > > using colinfo? > > By using "-V" - there's no way to do it in single-line > summary output".
I actually use "-x" to display data as hex and ASCII, which allows me to see the protocol based on strings. > > I'm getting a core dump (gdb back trace shows that the stack was > > > "tap_push_tapped_queue()/protocolinfo_packet()/proto_alloc_dfi lter_string()" > > ). > > I've fixed it so that it doesn't drop core, although it still > won't display stuff. (We could make it display it as > > frame[N:M] = XX:XX:XX:XX:XX:XX Thanks for fixing this. And this output format would be nice. So, if we specify: tethereal -r traces.ethereal -z "proto,colinfo,udp,udp" we will have all udp hex dump included encapsulated protocols tethereal -r traces.ethereal -z "proto,colinfo,sctp,sctp" we will have all sctp hex dump included encapsulated protocols > > Do I need to write a parser for this protocol (just ASCII strings)? > > That might more directly get you the output you want. That's what I thought too :) I'll see how to do this. Olivier.
