Full PROTO name (SIP)
XXX - add a brief SIP description here
XXX - add a brief description of SIP history
- ["TCP"]: Typically, SIP uses ["TCP"] as it's transport protocol. The well known TCP port for PROTO traffic is 80.
XXX - Add example traffic here (as plain text or Ethereal screenshot).
The SIP dissector is (fully functional, partially functional, not existing, ... whatever the current state is). Also add info of additional Ethereal features where appropriate, like special statistics of this protocol.
(XXX add links to preference settings affecting how SIP is dissected).
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of SIP display filter fields can be found in the [http://www.ethereal.com/docs/dfref/PROTO/PROTO.html display filter reference]
Show only the SIP based traffic:
You cannot directly filter SIP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one.
- add link to SIP specification and where to find additional info on the web about SIP