Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

answered 2019-06-28 14:33:03 +0000

SYN-bit gravatar image

Please check whether the following protocol preferences are enabled:

  • TCP: "Allow subdissector to reassemble TCP streams" -> should be enabled
  • SIP: "Reassemble SIP headers spanning multiple TCP segments" -> should be enabled
  • SIP: "Reassemble SIP bodies spanning multiple TCP segments" -> should be enabled if you want the SDP content to show up in one packet too.

You can find the protocol preferences by going to "Edit -> Preferences -> Protocols -> TCP / SIP" (Windows/Linux) or "Wireshark -> Preferences -> Protocols -> TCP / SIP" (Apple)