Here is a sample capture file containing a DTLS trace with the mobility extension.

Here is the patch against the Wireshark sources from the svn repo (rev 33234) of the work done so far.

wireshark-dtls_mobility_draft.diff

The mobility hello extension is supported, however, one might want to keep everything related to mobility in the same file as the DTLS dissector, which is not the case here.

In order to determine whether a record has a connection ID or not, we run a couple of sanity checks with different values for record_length. The test consists of a loop in which we compare a read length value against the remaining length in the given buffer.

In the given patch, we do not dissect correctly “regular” records without a connection ID any more, and dealing with multiple records within the same frame does not work well.

TODO :

• Fix the has_mobility_ext function to return FALSE when a record does not have a connection ID.
• Make the tests work for multiple records.
• Implement the use of conversations to see if other records have the extension or if it is in the handshake.