Appearance
Appearance
用于呼叫信令的 Transport Protocol,创建它是为了解决 TCP 在电话节点之间用于信令时存在的一些缺陷和问题。
Frame 3 (70 bytes on wire, 70 bytes captured) Arrival Time: Jul 1, 2004 17:44:49.872282000 Time delta from previous packet: 0.087355000 seconds Time since reference or first frame: 0.087704000 seconds Frame Number: 3 Packet Length: 70 bytes Capture Length: 70 bytesEthernet II, Src: 00:01:af:0c:06:96, Dst: 00:a0:80:00:5e:46 Destination: 00:a0:80:00:5e:46 (00:a0:80:00:5e:46) Source: 00:01:af:0c:06:96 (00:01:af:0c:06:96) Type: IP (0x0800)Internet Protocol, Src Addr: 10.28.6.42 (10.28.6.42), Dst Addr: 10.28.6.44 (10.28.6.44) Version: 4 Header length: 20 bytes Type of service: 0x00 (None) 000. .... = Precedence: routine (0) ...0 .... = Delay: Normal .... 0... = Throughput: Normal .... .0.. = Reliability: Normal .... ..0. = Cost: Normal Total Length: 56 Identification: 0xca40 (51776) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: SCTP (0x84) Header checksum: 0x8f74 (correct) Source: 10.28.6.42 (10.28.6.42) Destination: 10.28.6.44 (10.28.6.44)Stream Control Transmission Protocol Source port: 2905 Destination port: 2905 Verification tag: 0x00000e50 Checksum: 0x53c3055f (correct Adler32) HEARTBEAT chunk (Information: 20 bytes) Chunk type: HEARTBEAT (4) 0... .... = Bit: Stop processing of the packet .0.. .... = Bit: Do not report Chunk flags: 0x00 Chunk length: 24 Heartbeat info parameter (Information: 16 bytes) Parameter type: Heartbeat info (0x0001) 0... .... .... .... = Bit: Stop processing of chunk .0.. .... .... .... = Bit: Do not report Parameter length: 20 Heartbeat information: 40E44B920A1C062C1B66AF7E00000000Frame 4 (70 bytes on wire, 70 bytes captured) Arrival Time: Jul 1, 2004 17:44:49.872631000 Time delta from previous packet: 0.000349000 seconds Time since reference or first frame: 0.088053000 seconds Frame Number: 4 Packet Length: 70 bytes Capture Length: 70 bytesEthernet II, Src: 00:a0:80:00:5e:46, Dst: 00:01:af:0c:06:96 Destination: 00:01:af:0c:06:96 (00:01:af:0c:06:96) Source: 00:a0:80:00:5e:46 (00:a0:80:00:5e:46) Type: IP (0x0800)Internet Protocol, Src Addr: 10.28.6.44 (10.28.6.44), Dst Addr: 10.28.6.42 (10.28.6.42) Version: 4 Header length: 20 bytes Type of service: 0x00 (None) 000. .... = Precedence: routine (0) ...0 .... = Delay: Normal .... 0... = Throughput: Normal .... .0.. = Reliability: Normal .... ..0. = Cost: Normal Total Length: 56 Identification: 0xbb81 (48001) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: SCTP (0x84) Header checksum: 0x9f32 (correct) Source: 10.28.6.44 (10.28.6.44) Destination: 10.28.6.42 (10.28.6.42)Stream Control Transmission Protocol Source port: 2905 Destination port: 2905 Verification tag: 0x0d53e6fe Checksum: 0x8c8e0746 (correct Adler32) HEARTBEAT_ACK chunk (Information: 20 bytes) Chunk type: HEARTBEAT_ACK (5) 0... .... = Bit: Stop processing of the packet .0.. .... = Bit: Do not report Chunk flags: 0x00 Chunk length: 24 Heartbeat info parameter (Information: 16 bytes) Parameter type: Heartbeat info (0x0001) 0... .... .... .... = Bit: Stop processing of chunk .0.. .... .... .... = Bit: Do not report Parameter length: 20 Heartbeat information: 40E44B920A1C062C1B66AF7E00000000SCTP dissector 功能可用。
SCTP 有三个首选项设置:(XXX - 需要更新)
如果选择了错误的 checksum type,checksum 可能会显示为 incorrect。
SampleCaptures/sctp.cap - 一个简单的捕获文件,包含少量 SCTP PDUs。
完整的 SCTP display filter fields 列表可以在 display filter reference 中找到
只显示基于 SCTP 的流量:
sctp较新版本的 libpcap/WinPcap 支持过滤 SCTP 流量:
只捕获 SCTP 流量:
sctp如果这不起作用,因为 Wireshark 正在使用较旧版本的 libpcap/WinPcap,你可以显式指定 SCTP 的 IP protocol number:
只捕获 SCTP 流量:
ip proto 132www.sctp.org(Wayback Machine)
Better networking with SCTP(Wayback Machine)
导入自 https://wiki.wireshark.org/SCTP,时间为 2020-08-11 23:24:29 UTC