https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=16488
Bug ID: 16488
Summary: Decode and filter SIP Display Information uniquely for
"To", "From", "Contact" and "PSID" headers
Product: Wireshark
Version: 3.2.2
Hardware: x86-64
OS: Windows 10
Status: UNCONFIRMED
Severity: Enhancement
Priority: Low
Component: Dissection engine (libwireshark)
Assignee: bugzilla-ad...@wireshark.org
Reporter: khcoom...@hotmail.com
Target Milestone: ---
Build Information:
3.2.2 (v3.2.2-0-ga3efece3d640)
Compiled (64-bit) with Qt 5.12.6, with WinPcap SDK (WpdPack) 4.1.2, with GLib
2.52.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua 5.2.4,
with GnuTLS 3.6.3 and PKCS #11 support, with Gcrypt 1.8.3, with MIT Kerberos,
with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4, with
Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with automatic
updates using WinSparkle 0.5.7, with AirPcap, with SpeexDSP (using bundled
resampler), with SBC, with SpanDSP, with bcg729.
Running on 64-bit Windows Server 2016 (1607), build 14393, with Intel(R)
Xeon(R) CPU E7- 8870 @ 2.40GHz (with SSE4.2), with 8191 MB of physical memory,
with locale English_United States.1252, with light display mode, without HiDPI,
with Npcap version 0.9986, based on libpcap version 1.9.1, with GnuTLS 3.6.3,
with Gcrypt 1.8.3, with brotli 1.0.2, without AirPcap, binary plugins supported
(19 loaded).
Built using Microsoft Visual Studio 2019 (VC++ 14.24, build 28316).
--
When decoding the From, To, Contact, and P-Asserted-Identity headers, the
display information for each of these headers has the same field name, that is
"SIP Display info" (or sip.display.info). If I wanted to filter for a certain
name, then filtering at a high level for sip.display.info might be useful. But
it would be more useful yet to be able to drill down to filter SIP packets on
only certain headers such as the From or To header Display Information.
So, I'm asking for a unique field for each header's display info like these:
sip.from.display.info
sip.to.display.info
sip.P-Asserted-Identity.display.info
sip.contact.display.info
Where this would really come in handy is when applying these fields as columns.
Today if I do this, I will see 3 or 4 names in a single "SIP Display info"
column when I'd really like to pick which fields to display in their own
columns, such as the From and/or PSID display name when I'm testing for proper
Caller ID name, which I often do.
Thanks!
Kenneth
--
You are receiving this mail because:
You are watching all bug changes.___________________________________________________________________________
Sent via: Wireshark-bugs mailing list <wireshark-bugs@wireshark.org>
Archives: https://www.wireshark.org/lists/wireshark-bugs
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-bugs
mailto:wireshark-bugs-requ...@wireshark.org?subject=unsubscribe
