Realm Specific IP (RSIP)
Realm Specific IP (RSIP) is intended as an alternative to Network Address Translation (NAT) / Network Address Port Translation (NAPT) which maintains the end-to-end integrity of packets.
XXX - add a brief description of RSIP history
XXX - Add example decoded traffic for this protocol here (as plain text or Wireshark screenshot).
The RSIP dissector currently exists as a enhancement patch.
(XXX add links to preference settings affecting how RSIP is dissected).
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here (see below). Keep this file short, it's also a good idea to gzip it to make it even smaller, as Wireshark can open gzipped files automatically.
A complete list of RSIP display filter fields can be found in the display filter reference
Show only the RSIP based traffic:
Capture only the RSIP traffic over the default port (4555):
RFC 3102 Realm Specific IP: Framework -- general framework
RFC 3103 Realm Specific IP: Protocol Specification -- protocol definition
RFC 3104 RSIP Support for End-to-end IPsec -- mechanims to handle IP Security