Search code examples
wiresharkddprdma

wireshark decode as ddp

I am using wireshark to look at ddp/rdma packets, which usually works fine. Sometimes wireshark can't recognize that the next protocol after tcp is ddp/rdma (although I know it is), so I tried using "decode as" but there is no option for ddp/rdma in there.

Is there a way to force wireshark to parse the packet as ddp/rdma?

Thanks!

Solution

  • Is there a way to force wireshark to parse the packet as ddp/rdma?

    The dissector for iWARP DDP/RDMA, if that's what you're referring to, is a "heuristic" dissector, which means that 1) it looks at otherwise-undissected TCP packets and tries to guess whether they're packets for it and 2) it doesn't have a "force this" option.

    You should submit a bug to the Wireshark Bugzilla saying that Wireshark isn't recognizing the traffic as DDP/RDMA, and attach a sample capture.