Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Only show reassembled packets instead of frames

I'm working with some MPEG-TS DCM-CC (MPE) captures which wireshark is capable of reading with the mp2t dissector. However, Wireshark displays these files as a collection of 188 byte frames. For many frames, it's possible to click a tab that says "Reassembled MP2T" and see the entire logical packet but doing this for each one is tedious. Is there a way to extract just the reassembled packets/conversations from the capture?

This also happens for tcp/udp packets inside the MP2T stream so a way to extract just reassembled TCP packets would be super helpful as well.