Ask Your Question

Revision history [back]

As I suggested, the protocol, M3UA in this case, runs atop SCTP, so multiple PDU's appear in a single SCTP data chunk and are correctly dissected as can be seen in the packet details pane.

To break these out into separate SCTP data chunks will require a bit of work with external tools. My goto for this sort of thing is Scapy, and I see it has support for SCTP, but I've never used it.

The other option is to somehow arrange not to capture in this manner which is Linux Cooked Mode. Did you capture using the "Any" device?