Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread vineeth vijay
Hi, I understood the idea. It would help in easier detection of the relevant upper layer info in large packets. What i would like to know is how it could be implemented. Setting some sort of flag for the filter specific chunk bytes, so that GUI/GTK colors it differently? Sorry, but i am not much f

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread Michael Tuexen
On Jan 10, 2013, at 9:44 PM, vineeth vijay wrote: > Hi, > > Yes, highlighting would work too. Ultimately the application info > corresponding to display filter should be visible easily without the need to > scroll through the entire frame. Any suggestions on how to achieve this? > I think GUI c

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread vineeth vijay
Hi, Yes, highlighting would work too. Ultimately the application info corresponding to display filter should be visible easily without the need to scroll through the entire frame. Any suggestions on how to achieve this? I think GUI coloring implementation would paint the entire frame with the same

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread Michael Tuexen
On Jan 10, 2013, at 8:49 PM, vineeth vijay wrote: > Hi, > > > Dissection is fine. What I was wondering is whether it is possible to show > > these individual data chunks as separate frames themselves. > >But they are in the same frame. I really prefer not to show them in a way > >they > have n

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread Michael Tuexen
On Jan 10, 2013, at 5:31 PM, vineeth vijay wrote: > Hi, > > Dissection is fine. What I was wondering is whether it is possible to show > these individual data chunks as separate frames themselves. But they are in the same frame. I really prefer not to show them in a way they have not been on th

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread vineeth vijay
Hi, > Dissection is fine. What I was wondering is whether it is possible to show these individual data chunks as separate frames themselves. >But they are in the same frame. I really prefer not to show them in a way they have not been on the wire. Basically agreed on the above point. Changing th

[Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread vineeth vijay
Hi All, Has the de-chunking of SCTP within wireshark been attempted yet? I noticed some old conversations in mailing list in this regard, but nothing concrete has turned up yet. While trying to do this in tshark, I have tried calling tshark's process_packet() function from packet-sctp.c file in di

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread vineeth vijay
Hi, Dissection is fine. What I was wondering is whether it is possible to show these individual data chunks as separate frames themselves. Hence, when i apply display filter , only the chunks with exact matches should be visible. Is this supported currently? Currently , i use the below tool for

Re: [Wireshark-dev] SCTP De-chunking support

2013-01-10 Thread Michael Tuexen
On Jan 10, 2013, at 5:07 PM, vineeth vijay wrote: > Hi All, > > Has the de-chunking of SCTP within wireshark been attempted yet? I noticed > some old conversations in mailing list in this regard, but nothing concrete > has turned up yet. While trying to do this in tshark, I have tried calling

Re: [Wireshark-dev] Packet Loss due to Disk Contention with Running Dumpcap in a high packet rate environment

2013-01-10 Thread John Powell
Hi Kurt, I have purchased a 300 GB SSD and a PCI-e Disk Controller. I am still in the planning stage as to how to set this up. My initial ideas are to: - Leave the SSD on the motherboard Disk Controller - Connect the Platter Hard Drives to the PCI-e Disk Controller - Send the initial