How does Wireshark count packets for reassembled Diameter/SCTP messages? Reassembly is enabled for both layers. If a single Diameter message takes 2 packets, are both packets counted? If the graph is filtered by diameter.cmd.code and this would include multi-packet reassembled messages, are all packets counted, or just the first packet (that actually contains the cmd.code)? Thanks! asked 19 Apr '13, 10:15  lkravitz |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
