Tutorial: SCTP

WTF is SCTP

SCTP was created because TCP with its flow control bears too much overhead for modern multimedia protocols. It combines characteristics of UDP and TCP, without head-of-line blocking, to ensure optimal transfer. Error forward correction is included by CRC and everything and flow control is not byte oriented but sequence oriented, being more multimedia oriented.

Moreover multihoming is supported, meaning clients with multiple addresses can be serviced in one streami. Moreover several streams can be transported in one packet, so less sockets need to be opened as in TCP or UDP. The protocol is not widely spread although being standardized in 2000.

This tutorial will teach you about the configuration of T2 core to activate the SCTP flow stream dissector and give a shor introduction to the SCTP plugin.

This is not a tutorial about sctp, a good overview about the packet structure can be found here: SCTP

Before we start we need to prepare T2. If you did not complete the tutorials before just follow the procedure described below.

First I recommend to set T2 into a pristine state by removing all unnecessary or older plugins from the plugin folder ~/.tranalyzer/plugins and compile the standard plugins. Just as a precaution if you have some old plugins or files there. If you like to keep them, please copy them away.

Open networkHeaders.h in the tranalyzer src directory and look for user defines:

SCTP_ACTIVATE switches the sctp flow stream dissection on. For the time being we leave it at the default state: off. Now remove all old plugins and compile the core and the following four plugins.

$ t2build -e
Are you sure you want to empty the plugin folder '/home/wurst/.tranalyzer/plugins' (y/N)? y
Plugin folder emptied
$ t2build tranalyzer2 basicFlow basicStats sctpDecode txtSink
...
BUILD SUCCESSFUL

$

Compiling the basicFlow took now a bit longer, because the subnetfile for geolocation had to rebuilt. Moreover the ‘-e’ option also removes all subnetfiles.

Another method is to just remove the .so files, and preserve the old subnetfiles. go to the trunk folder, us the alias tran for a change and move to protocols.h and open the file in an editor, e.g. vim.

As the average user does not need sctp, we disabled it in the global statistics. So enable it by setting SCTP_STAT 1, as indicated above. Close the file and compile the follwong pllugins

$ rm ~/.tranalyzer/plugins/*.so
$ t2build basicFlow basicStats sctpDecode protocols txtSink
...
BUILD SUCCESSFUL

$

Then the compilation will be considerable faster, as the subnetfile already exists. If you did not create a separate data and results directory yet, please do it now in another cmd window, that facilitates your workflow:

$ mkdir ~/data
$ mkdir ~/results
$ cd data

Download the sample pcap if did not do it already: sctp-multi.pcap. Now you’re all set. Let’s start with the sctp pcap in T2 default mode.

SCTP in T2 default mode

Invoke T2 with the pcap and write it in your results folderi -w.

$ t2 -r ~/data/sctp-multi.pcap -w ~/results/sctp/
================================================================================
Tranalyzer 0.8.2 (Anteater), Tarantula. PID: 4361
================================================================================
[INF] Creating flows for L2, IPv4, IPv6
Active plugins:
    01: protoStats, 0.8.2
    02: basicFlow, 0.8.3
    03: basicStats, 0.8.3
    04: sctpDecode, 0.8.2
    05: txtSink, 0.8.2
[INF] basicFlow: IPv4 Ver: 3, Rev: 20190114, Range Mode: 0, subnet ranges loaded: 2816148 (2.82 M)
[INF] basicFlow: IPv6 Ver: 3, Rev: 20190114, Range Mode: 0, subnet ranges loaded: 36634 (36.63 K)
Processing file: /home/wurst/data/sctp-multi.pcap
Link layer type: Ethernet [EN10MB/1]
Dump start: 1108716598.686079 sec (Fri 18 Feb 2005 08:49:58 GMT)
Dump stop : 1108716598.771526 sec (Fri 18 Feb 2005 08:49:58 GMT)
Total dump duration: 0.085447 sec
Finished processing. Elapsed time: 0.000103 sec
Finished unloading flow memory. Time: 0.000151 sec
Percentage completed: 100.00%
Number of processed packets: 74
Number of processed bytes: 67816 (67.82 K)
Number of raw bytes: 67816 (67.82 K)
Number of pcap bytes: 69024 (69.02 K)
Number of IPv4 packets: 74 [100.00%]
Number of A packets: 37 [50.00%]
Number of B packets: 37 [50.00%]
Number of A bytes: 33774 (33.77 K) [49.80%]
Number of B bytes: 34042 (34.04 K) [50.20%]
Average A packet load: 912.81
Average B packet load: 920.05
--------------------------------------------------------------------------------
basicStats: Biggest Talker: 192.168.170.8: 37 [50.00%] packets
basicStats: Biggest Talker: 192.168.170.56: 32340 (32.34 K) [47.69%] bytes
sctpDecode: aggregated status, type Bitfield: 0x00, 0x0c0f
--------------------------------------------------------------------------------
Headers count: min: 3, max: 3, average: 3.00
Number of SCTP packets: 74 [100.00%]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Number of processed   flows: 2
Number of processed A flows: 1 [50.00%]
Number of processed B flows: 1 [50.00%]
Number of request     flows: 1 [50.00%]
Number of reply       flows: 1 [50.00%]
Total   A/B    flow asymmetry: 0.00
Total req/rply flow asymmetry: 0.00
Number of processed   packets/flows: 37.00
Number of processed A packets/flows: 37.00
Number of processed B packets/flows: 37.00
Number of processed total packets/s: 866.03
Number of processed A+B packets/s: 866.03
Number of processed A   packets/s: 433.02
Number of processed   B packets/s: 433.02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Number of average processed flows/s: 23.41
Average full raw bandwidth: 6349292 b/s (6.35 Mb/s)
Average full bandwidth : 6349292 b/s (6.35 Mb/s)
Max number of flows in memory: 2 [0.00%]
Memory usage: 0.35 GB [0.52%]
Aggregate flow status: 0x0000100001004000
[WRN] Consecutive duplicate IP ID
[INF] IPv4
[INF] SCTP flows
$

Looking at the plugin end report, a summary of the number of packets and aggregated states is supplied. Two flows are created, so one communication between two peers. A summary of the sctp status and all chunk types is presented.

tawk -V sctpStat

The sctpStat column is to be interpreted as follows:

   bit | sctpStat | Description
   =============================================================================
     0 | 0x01     | Adler32 error
     1 | 0x02     | CRC32 error
     2 | 0x04     | -
     3 | 0x08     | Chunk truncated
     4 | 0x10     | -
     5 | 0x20     | Type Field overflow 
     6 | 0x40     | Type BF: do not report
     7 | 0x80     | Type BF: stop processing of the packet

$ tawk -V sctpTypeBF=0x0c0f

The sctpTypeBF column with value 0x0c0f is to be interpreted as follows:

   bit | sctpTypeBF | Description
   =============================================================================
     0 | 0x0001     | Payload data 
     1 | 0x0002     | Initiation
     2 | 0x0004     | Initiation acknowledgement
     3 | 0x0008     | Selective acknowledgement
    10 | 0x0400     | State cookie
    11 | 0x0800     | Cookie acknowledgement

Seems to be a normal sctp stream. Now, open the flow file under your results directory.

$ cd results
$ tcol sctp-multi_flows.txt
%dir  flowInd  flowStat            timeFirst          timeLast           duration  numHdrDesc  numHdrs  hdrDesc        ethVlanID  srcIP           srcIPCC  srcIPWho            srcPort  dstIP           dstIPCC  dstIPWho            dstPort  l4Proto  numPktsSnt  numPktsRcvd  numBytesSnt  numBytesRcvd  minPktSz  maxPktSz  avePktSize  stdPktSize  minIAT  maxIAT    aveIAT       stdIAT       pktps     bytps     pktAsm  bytAsm        sctpStat  sctpMaxDSNum  sctpPID  sctpVTag    sctpTypeBF  sctpCntD_I_A  sctpCFlgs  sctpCCBF  sctpIS  sctpOS  sctpIARW  sctpIARWMin  sctpIARWiMax  sctpARW
A     1        0x0000100001004000  1108716598.686079  1108716598.763435  0.077356  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      37          37           32072        32340         16        1072      866.8108    303.2927    0       0.007658  0.002090703  0.001983343  478.3081  414602.6  0       -0.004160715  0x00      11            0        0x00000eb0  0x040b      60_1_0        0x07       0x0000    17      17      65535     65535        65535         65535
B     1        0x0000000001004001  1108716598.686375  1108716598.771526  0.085151  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      37          37           32340        32072         4         1072      874.0541    280.4827    0       0.013896  0.002301379  0.003496052  434.5222  379795.9  0       0.004160715   0x00      11            0        0x43232544  0x080d      60_0_0        0x07       0x0000    17      17      4096      4096         4096          4096
$

The maximum announced number of in/out streams sctpIS, sctpOS: 17, the actual Data channels 11, a bitfield with all chunk types, codes as in icmpDecode, or just ask tawk:

$ tawk -V sctpTypeBF 

The sctpTypeBF column is to be interpreted as follows:

   bit | sctpTypeBF | Description
   =============================================================================
     0 | 0x0001     | Payload data 
     1 | 0x0002     | Initiation
     2 | 0x0004     | Initiation acknowledgement
     3 | 0x0008     | Selective acknowledgement
     4 | 0x0010     | Heartbeat request
     5 | 0x0020     | Heartbeat acknowledgement
     6 | 0x0040     | Abort
     7 | 0x0080     | Shutdown
     8 | 0x0100     | Shutdown acknowledgement
     9 | 0x0200     | Operation error
    10 | 0x0400     | State cookie
    11 | 0x0800     | Cookie acknowledgement
    12 | 0x1000     | Explicit congestion notification echo (reserved)
    13 | 0x2000     | Congestion window reduced (reserved)
    14 | 0x4000     | Shutdown complete
    15 | 0x8000     | Authentication chunk

The packet mode shows all sctp streams information in one packet aggregated into one column separate by ‘;’: ChunkType, StreamID, chunk flags and chunk length. We will discuss this more under chapter sctpDecode

$ head -n 18 sctp-multi_packets.txt | tcol
%pktNo  flowInd  flowStat            time               pktIAT    flowDuration  numHdrs  hdrDesc        ethVlanID  srcMac             dstMac             ethType  srcIP           srcIPCC  srcIPWho          srcPort  dstIP           dstIPCC  dstIPWho          dstPort  l4Proto  pktLen  l7Len  sctpVerifTag  sctpChunkType_Sid_Flags_Len             sctpNChunks  sctpStat  l7Content
1       1        0x0000000001004000  1108716598.686079  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      78      32     0x00000000    1_0_0x00_32                             1            0x00      ... C#%D........\.7.............
2       1        0x0000000001004001  1108716598.686375  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      174     128    0x43232544    2_0_0x00_128                            1            0x00      ..................6....h..............6.C#%D........\.7................?.'.......v..U...,>|5...................8................
3       1        0x0000000001004000  1108716598.686862  0.000783  0.000783      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      150     104    0x00000eb0    10_0_0x00_104                           1            0x00      \n..h..............6.C#%D........\.7................?.'.......v..U...,>|5...................8............
4       1        0x0000000001004001  1108716598.687080  0.000705  0.000705      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      50      4      0x43232544    11_0_0x00_4                             1            0x00      ....
5       1        0x0000100001004000  1108716598.688291  0.001429  0.002212      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    1056   0x00000eb0    0_0_0x07_528;0_1_0x07_528               2            0x00      ....\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       1        0x0000000001004001  1108716598.688538  0.001458  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16;0_0_0x07_528;0_1_0x07_528   3            0x00      ....\.7...............6...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       1        0x0000100001004000  1108716598.689195  0.000904  0.003116      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    1056   0x00000eb0    0_2_0x07_528;0_3_0x07_528               2            0x00      ....\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       1        0x0000000001004001  1108716598.689402  0.000864  0.003027      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16;0_2_0x07_528;0_3_0x07_528   3            0x00      ....\.7...............6...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       1        0x0000100001004000  1108716598.690095  0.000900  0.004016      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    1056   0x00000eb0    0_4_0x07_528;0_5_0x07_528               2            0x00      ....\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      1        0x0000100001004000  1108716598.693263  0.003168  0.007184      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    1056   0x00000eb0    0_6_0x07_528;0_7_0x07_528               2            0x00      ....\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      1        0x0000000001004001  1108716598.693336  0.003934  0.006961      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16;0_4_0x07_528;0_5_0x07_528   3            0x00      ....\.7...............6...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
12      1        0x0000100001004000  1108716598.693735  0.000472  0.007656      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     544    0x00000eb0    3_0_0x00_16;0_8_0x07_528                2            0x00      ......6.............\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      1        0x0000000001004001  1108716598.693951  0.000615  0.007576      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16;0_6_0x07_528;0_7_0x07_528   3            0x00      ....\.7...............6...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
14      1        0x0000000001004001  1108716598.694007  0.000056  0.007632      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      574     528    0x43232544    0_8_0x07_528                            1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      1        0x0000100001004000  1108716598.694950  0.001215  0.008871      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    1056   0x00000eb0    0_9_0x07_528;0_10_0x07_528              2            0x00      ....\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7..\n......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.002417  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    1072   0x00000eb0    3_0_0x00_16;0_11_0x07_528;0_0_0x07_528  3            0x00      ......6.............\.7.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
17      1        0x0000000001004001  1108716598.700250  0.006243  0.013875      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     544    0x43232544    3_0_0x00_16;0_9_0x07_528                2            0x00      ....\.7...............6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Looking into the protocols file note that the sctp has now an entry with port 7 and the packet count. The Description Echo is misleading, as sctp ports are here not compliant with the standard port designation.

$ lsx sctp-multi_protocols.txt
# Total packets: 74
# L2/3 Protocol                   Packets        Percentage          Description
0x0800                            74             100.000             Internet Protocol version 4 (IPv4)


# Total IPv4 packets: 74
# Total IPv6 packets: 0
# L4 Protocol                     Packets        Percentage         Description
132                               74             100.000            Stream Control Transmission Protocol


# Total TCP packets: 0


# Total UDP packets: 0


# Total SCTP packets: 74
# Port                            Packets        Percentage        Description
7                                 74             100.000           Echo
$

Now let’s look what happens when we switch on the SCTP dissect mode of T2 core, meaning that we add the sctp stream id to the flow hash.

T2 in SCTP stream dissect mode

To enable the stream dissect mode, open networkHeaders.h in the tranalyzer src directory and look for the user defines section and set SCTP_ACTIVATE 1 as shown below:

Recompile the core and the following four plugins. And invoke T2 again including packet modei -s option.

$ t2build -R

...

$ t2 -r ~/data/sctp-multi.pcap -w ~/results/sctp/sctp-multi -s
================================================================================
Tranalyzer 0.8.2 (Anteater), Tarantula. PID: 2388
================================================================================
[INF] Creating flows for L2, IPv4, IPv6, SCTP
Active plugins:
    01: basicFlow, 0.8.3
    02: basicStats, 0.8.3
    03: sctpDecode, 0.8.2
    04: txtSink, 0.8.2
[INF] basicFlow: IPv4 Ver: 3, Rev: 20190114, Range Mode: 0, subnet ranges loaded: 2816148 (2.82 M)
[INF] basicFlow: IPv6 Ver: 3, Rev: 20190114, Range Mode: 0, subnet ranges loaded: 36634 (36.63 K)
Processing file: /home/wurst/data/sctp-multi.pcap
Link layer type: Ethernet [EN10MB/1]
Dump start: 1108716598.686079 sec (Fri 18 Feb 2005 08:49:58 GMT)
Dump stop : 1108716598.771526 sec (Fri 18 Feb 2005 08:49:58 GMT)
Total dump duration: 0.085447 sec
Finished processing. Elapsed time: 0.000232 sec
Finished unloading flow memory. Time: 0.000556 sec
Percentage completed: 100.00%
Number of processed packets: 74
Number of processed bytes: 67816 (67.82 K)
Number of raw bytes: 67816 (67.82 K)
Number of pcap bytes: 69024 (69.02 K)
Number of IPv4 packets: 74 [100.00%]
Number of A packets: 37 [50.00%]
Number of B packets: 37 [50.00%]
Number of A bytes: 33774 (33.77 K) [49.80%]
Number of B bytes: 34042 (34.04 K) [50.20%]
Average A packet load: 912.81
Average B packet load: 920.05
--------------------------------------------------------------------------------
basicStats: Biggest Talker: 192.168.170.56: 41 [55.41%] packets
basicStats: Biggest Talker: 192.168.170.56: 34356 (34.36 K) [50.66%] bytes
sctpDecode: aggregated status, type Bitfield: 0x00, 0x0c0f
--------------------------------------------------------------------------------
Headers count: min: 3, max: 3, average: 3.00
Number of SCTP packets: 74 [100.00%]
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Number of processed   flows: 24
Number of processed A flows: 12 [50.00%]
Number of processed B flows: 12 [50.00%]
Number of request     flows: 12 [50.00%]
Number of reply       flows: 12 [50.00%]
Total   A/B    flow asymmetry: 0.00
Total req/rply flow asymmetry: 0.00
Number of processed   packets/flows: 3.08
Number of processed A packets/flows: 3.08
Number of processed B packets/flows: 3.08
Number of processed total packets/s: 866.03
Number of processed A+B packets/s: 866.03
Number of processed A   packets/s: 433.02
Number of processed   B packets/s: 433.02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Number of average processed flows/s: 280.88
Average full raw bandwidth: 6349292 b/s (6.35 Mb/s)
Average full bandwidth : 6349292 b/s (6.35 Mb/s)
Max number of flows in memory: 24 [0.01%]
Memory usage: 0.35 GB [0.52%]
Aggregate flow status: 0x0000100001004000
[WRN] Consecutive duplicate IP ID
[INF] IPv4
[INF] SCTP flows
$

Now in the top line T2 notes that he also creates independent flows for sctp streams. hence 24 flows, 12 communications are created. Now go to your results window again and open the sctp-multi_flows.txt Note that every flow is labeled with the same flowInd 1, as all sctp stream flows are from one packet flow.

$ tcol sctp-multi_flows.txt
%dir  flowInd  flowStat            timeFirst          timeLast           duration  numHdrDesc  numHdrs  hdrDesc        ethVlanID  srcIP           srcIPCC  srcIPWho            srcPort  dstIP           dstIPCC  dstIPWho            dstPort  l4Proto  numPktsSnt  numPktsRcvd  numBytesSnt  numBytesRcvd  minPktSz  maxPktSz  avePktSize  stdPktSize  minIAT  maxIAT    aveIAT       stdIAT       pktps     bytps     pktAsm      bytAsm     sctpStat  sctpDSNum  sctpPID  sctpVTag    sctpTypeBF  sctpCntD_I_A  sctpCFlgs  sctpCCBF  sctpIS  sctpOS  sctpIARW  sctpIARWMin  sctpIARWiMax  sctpARW
A     1        0x0000000001004000  1108716598.697367  1108716598.751383  0.054016  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.019717  0.013504     0.005976828  74.05213  37914.69  0           0          0x00      11         0        0x00000eb0  0x0001      4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.700651  1108716598.756477  0.055826  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.022678  0.0139565    0.006462127  71.6512   36685.41  0           0          0x00      11         0        0x43232544  0x0001      4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.688291  1108716598.751383  0.063092  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.018223  0.0126184    0.005361295  79.24935  40575.67  0           0          0x00      1          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.688538  1108716598.756477  0.067939  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.0135878    0.006479933  73.59544  37680.86  0           0          0x00      1          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.689195  1108716598.752140  0.062945  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.01898   0.012589     0.005557677  79.43443  40670.43  0           0          0x00      2          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.689402  1108716598.756727  0.067325  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.013465     0.006579555  74.26662  38024.51  0           0          0x00      2          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.689195  1108716598.753271  0.064076  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0128152    0.005597543  78.03234  39952.56  0           0          0x00      3          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.689402  1108716598.756967  0.067565  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.013513     0.00608459   74.00281  37889.44  0           0          0x00      3          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.690095  1108716598.753271  0.063176  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0126352    0.005108401  79.14398  40521.72  0           0          0x00      4          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.693336  1108716598.756967  0.063631  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.0127262    0.005697675  78.57806  40231.96  0           0          0x00      4          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.690095  1108716598.760341  0.070246  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0140492    0.005889928  71.17843  36443.36  0           0          0x00      5          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.693336  1108716598.770863  0.077527  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0155054    0.007011673  64.49366  33020.75  0           0          0x00      5          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.693263  1108716598.760341  0.067078  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0134156    0.005683439  74.54008  38164.52  0           0          0x00      6          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.693951  1108716598.770863  0.076912  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0153824    0.006592538  65.00936  33284.79  0           0          0x00      6          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.693263  1108716598.761549  0.068286  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019427  0.0136572    0.005618318  73.22145  37489.38  0           0          0x00      7          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.693951  1108716598.771163  0.077212  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024675  0.0154424    0.006634399  64.75677  33155.47  0           0          0x00      7          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.693735  1108716598.761549  0.067814  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0135628    0.00574128   73.73109  37750.32  0           0          0x00      8          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.694007  1108716598.771163  0.077156  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024451  0.0154312    0.007122566  64.80377  33179.53  0           0          0x00      8          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000000001004000  1108716598.694950  1108716598.762308  0.067358  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0134716    0.005884205  74.23023  38005.88  0           0          0x00      9          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.700250  1108716598.771310  0.071060  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024598  0.014212     0.007284279  70.36308  36025.89  0           0          0x00      9          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.686079  1108716598.763435  0.077356  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      24          41           18776        34356         16        1072      782.3333    347.4483    0       0.008278  0.003223167  0.002523227  310.2539  242722    -0.2615385  -0.293232  0x00      0          0        0x00000eb0  0x040b      6_1_0         0x07       0x0000    17      17      65535     65535        65535         65535
B     1        0x0000000001004001  1108716598.686375  1108716598.771526  0.085151  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      41          24           34356        18776         4         1072      837.9512    288.5713    0       0.013896  0.002076854  0.003394506  481.4976  403471.5  0.2615385   0.293232   0x00      0          0        0x43232544  0x080d      6_0_0         0x07       0x0000    17      17      4096      4096         4096          4096
A     1        0x0000000001004000  1108716598.694950  1108716598.763435  0.068485  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022134  0.013697     0.005530534  73.00869  37380.45  0           0          0x00      10         0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     1        0x0000000001004001  1108716598.700597  1108716598.771526  0.070929  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022732  0.0141858    0.005774313  70.49303  36092.43  0           0          0x00      10         0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0

If you look at the packets file you will see that the flowInd is always 1 and there are several packet numbers with the same value. The disadvantage of this configuration is the fact that you cannot discern which stream, unless you look at sctpChunkType_Sid. If there are many other flows of all kinds of protocols, packets can be easily selected by tawk according to flows and streams.

$ head -n 35 sctp-test_packets.txt  | tcol
%pktNo  flowInd  flowStat            time               pktIAT    flowDuration  numHdrs  hdrDesc        ethVlanID  srcMac             dstMac             ethType  srcIP           srcIPCC  srcIPWho          srcPort  dstIP           dstIPCC  dstIPWho          dstPort  l4Proto  pktLen  l7Len  sctpVerifTag  sctpChunkType_Sid_Flags_Len  sctpNChunks  sctpStat  l7Content
1       1        0x0000000001004000  1108716598.686079  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      78      32     0x00000000    1_0_0x00_32                  1            0x00      
2       1        0x0000000001004001  1108716598.686375  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      174     128    0x43232544    2_0_0x00_128                 1            0x00      
3       1        0x0000000001004000  1108716598.686862  0.000783  0.000783      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      150     104    0x00000eb0    10_0_0x00_104                1            0x00      
4       1        0x0000000001004001  1108716598.687080  0.000705  0.000705      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      50      4      0x43232544    11_0_0x00_4                  1            0x00      
5       1        0x0000100001004000  1108716598.688291  0.001429  0.002212      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_0_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
5       1        0x0000000001004000  1108716598.688291  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_1_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       1        0x0000000001004001  1108716598.688538  0.001458  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
6       1        0x0000000001004001  1108716598.688538  0.000000  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_0_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       1        0x0000000001004001  1108716598.688538  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_1_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       1        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_2_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       1        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_3_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       1        0x0000000001004001  1108716598.689402  0.000864  0.003027      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
8       1        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_2_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       1        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_3_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       1        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_4_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       1        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_5_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      1        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_6_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      1        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_7_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      1        0x0000000001004001  1108716598.693336  0.003934  0.006961      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
11      1        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_4_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      1        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_5_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
12      1        0x0000100001004000  1108716598.693735  0.005444  0.007656      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     544    0x00000eb0    3_0_0x00_16                  1            0x00      
12      1        0x0000000001004000  1108716598.693735  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     512    0x00000eb0    0_8_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      1        0x0000000001004001  1108716598.693951  0.000615  0.007576      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
13      1        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_6_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      1        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_7_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
14      1        0x0000000001004001  1108716598.694007  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      574     512    0x43232544    0_8_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      1        0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_9_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      1        0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_10_0x07_528                1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.003632  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    1072   0x00000eb0    3_0_0x00_16                  1            0x00      
16      1        0x0000000001004000  1108716598.697367  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    0_11_0x07_528                1            0x00      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.000000  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    0_0_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
17      1        0x0000000001004001  1108716598.700250  0.006299  0.013875      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     544    0x43232544    3_0_0x00_16                  1            0x00      
17      1        0x0000000001004001  1108716598.700250  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     512    0x43232544    0_9_0x07_528                 1            0x00      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Now open networkHeaders again and set SCTP_STATFINDEX 0, then the config should look as depicted below:

Save the file, recompile T2 and rerun it.

$ t2build -R

...

$ t2 -r ~/data/sctp-multi.pcap -w ~/results/sctp/sctp-multi
================================================================================
Tranalyzer 0.8.2 (Anteater), Tarantula. PID: 2388
================================================================================
[INF] Creating flows for L2, IPv4, IPv6, SCTP
...

Aggregate flow status: 0x0000100001004000
[WRN] Consecutive duplicate IP ID
[INF] IPv4
[INF] SCTP flows
$

Now each flow stream has a different flowInd. So you can easily discern which packets belong to which stream flow by the flowInd alone, unless there are more packets. Nevertheless, if there are more flows of any protocol present to you, the flowInd to packet relation is then uniq but difficult to extract. If you want to treat streams individually independent of packet flow association, that is the mode to use.

$ tcol sctp-multi_flows.txt
%dir  flowInd  flowStat            timeFirst          timeLast           duration  numHdrDesc  numHdrs  hdrDesc        ethVlanID  srcIP           srcIPCC  srcIPWho            srcPort  dstIP           dstIPCC  dstIPWho            dstPort  l4Proto  numPktsSnt  numPktsRcvd  numBytesSnt  numBytesRcvd  minPktSz  maxPktSz  avePktSize  stdPktSize  minIAT  maxIAT    aveIAT       stdIAT       pktps     bytps     pktAsm      bytAsm     sctpStat  sctpDSNum  sctpPID  sctpVTag    sctpTypeBF  sctpCntD_I_A  sctpCFlgs  sctpCCBF  sctpIS  sctpOS  sctpIARW  sctpIARWMin  sctpIARWiMax  sctpARW
A     12       0x0000000001004000  1108716598.697367  1108716598.751383  0.054016  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.019717  0.013504     0.005976828  74.05213  37914.69  0           0          0x00      11         0        0x00000eb0  0x0001      4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     12       0x0000000001004001  1108716598.700651  1108716598.756477  0.055826  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.022678  0.0139565    0.006462127  71.6512   36685.41  0           0          0x00      11         0        0x43232544  0x0001      4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     2        0x0000100001004000  1108716598.688291  1108716598.751383  0.063092  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.018223  0.0126184    0.005361295  79.24935  40575.67  0           0          0x00      1          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     2        0x0000000001004001  1108716598.688538  1108716598.756477  0.067939  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.0135878    0.006479933  73.59544  37680.86  0           0          0x00      1          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     3        0x0000000001004000  1108716598.689195  1108716598.752140  0.062945  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.01898   0.012589     0.005557677  79.43443  40670.43  0           0          0x00      2          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     3        0x0000000001004001  1108716598.689402  1108716598.756727  0.067325  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.013465     0.006579555  74.26662  38024.51  0           0          0x00      2          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     4        0x0000100001004000  1108716598.689195  1108716598.753271  0.064076  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0128152    0.005597543  78.03234  39952.56  0           0          0x00      3          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     4        0x0000000001004001  1108716598.689402  1108716598.756967  0.067565  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.013513     0.00608459   74.00281  37889.44  0           0          0x00      3          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     5        0x0000000001004000  1108716598.690095  1108716598.753271  0.063176  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0126352    0.005108401  79.14398  40521.72  0           0          0x00      4          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     5        0x0000000001004001  1108716598.693336  1108716598.756967  0.063631  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.0127262    0.005697675  78.57806  40231.96  0           0          0x00      4          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     6        0x0000100001004000  1108716598.690095  1108716598.760341  0.070246  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0140492    0.005889928  71.17843  36443.36  0           0          0x00      5          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     6        0x0000000001004001  1108716598.693336  1108716598.770863  0.077527  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0155054    0.007011673  64.49366  33020.75  0           0          0x00      5          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     7        0x0000000001004000  1108716598.693263  1108716598.760341  0.067078  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0134156    0.005683439  74.54008  38164.52  0           0          0x00      6          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     7        0x0000000001004001  1108716598.693951  1108716598.770863  0.076912  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0153824    0.006592538  65.00936  33284.79  0           0          0x00      6          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     8        0x0000000001004000  1108716598.693263  1108716598.761549  0.068286  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019427  0.0136572    0.005618318  73.22145  37489.38  0           0          0x00      7          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     8        0x0000000001004001  1108716598.693951  1108716598.771163  0.077212  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024675  0.0154424    0.006634399  64.75677  33155.47  0           0          0x00      7          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     9        0x0000000001004000  1108716598.693735  1108716598.761549  0.067814  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0135628    0.00574128   73.73109  37750.32  0           0          0x00      8          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     9        0x0000000001004001  1108716598.694007  1108716598.771163  0.077156  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024451  0.0154312    0.007122566  64.80377  33179.53  0           0          0x00      8          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     10       0x0000000001004000  1108716598.694950  1108716598.762308  0.067358  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0134716    0.005884205  74.23023  38005.88  0           0          0x00      9          0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     10       0x0000000001004001  1108716598.700250  1108716598.771310  0.071060  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024598  0.014212     0.007284279  70.36308  36025.89  0           0          0x00      9          0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.686079  1108716598.763435  0.077356  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      24          41           18776        34356         16        1072      782.3333    347.4483    0       0.008278  0.003223167  0.002523227  310.2539  242722    -0.2615385  -0.293232  0x00      0          0        0x00000eb0  0x040b      6_1_0         0x07       0x0000    17      17      65535     65535        65535         65535
B     1        0x0000000001004001  1108716598.686375  1108716598.771526  0.085151  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      41          24           34356        18776         4         1072      837.9512    288.5713    0       0.013896  0.002076854  0.003394506  481.4976  403471.5  0.2615385   0.293232   0x00      0          0        0x43232544  0x080d      6_0_0         0x07       0x0000    17      17      4096      4096         4096          4096
A     11       0x0000000001004000  1108716598.694950  1108716598.763435  0.068485  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022134  0.013697     0.005530534  73.00869  37380.45  0           0          0x00      10         0        0x00000eb0  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     11       0x0000000001004001  1108716598.700597  1108716598.771526  0.070929  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022732  0.0141858    0.005774313  70.49303  36092.43  0           0          0x00      10         0        0x43232544  0x0001      5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
$

Now the packet numbers can be assigned also to the flow stream directly, tehy match now sctpChunk_Sid + 1 in this special case. If there are more flows around, this is not the case. Nevertheless, if you extracted a sctp connection consisting many streams, this mode facilitates the tawk post processing considerable.

$ head -n 35 sctp-multi_packets.txt | tcol
%pktNo  flowInd  flowStat            time               pktIAT    flowDuration  numHdrs  hdrDesc        ethVlanID  srcMac             dstMac             ethType  srcIP           srcIPCC  srcIPWho          srcPort  dstIP           dstIPCC  dstIPWho          dstPort  l4Proto  pktLen  l7Len  sctpVerifTag  sctpChunkType_Sid_Flags_Len  sctpNChunks  sctpStat  l7Content
1       1        0x0000000001004000  1108716598.686079  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      78      32     0x00000000    1_0_0x00_32                  1            0x00      
2       1        0x0000000001004001  1108716598.686375  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      174     128    0x43232544    2_0_0x00_128                 1            0x00      
3       1        0x0000000001004000  1108716598.686862  0.000783  0.000783      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      150     104    0x00000eb0    10_0_0x00_104                1            0x00      
4       1        0x0000000001004001  1108716598.687080  0.000705  0.000705      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      50      4      0x43232544    11_0_0x00_4                  1            0x00      
5       1        0x0000100001004000  1108716598.688291  0.001429  0.002212      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_0_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
5       2        0x0000000001004000  1108716598.688291  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_1_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       1        0x0000000001004001  1108716598.688538  0.001458  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
6       1        0x0000000001004001  1108716598.688538  0.000000  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_0_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       2        0x0000000001004001  1108716598.688538  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_1_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       3        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_2_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       4        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_3_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       1        0x0000000001004001  1108716598.689402  0.000864  0.003027      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
8       3        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_2_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       4        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_3_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       5        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_4_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       6        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_5_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      7        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_6_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      8        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_7_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      1        0x0000000001004001  1108716598.693336  0.003934  0.006961      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
11      5        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_4_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      6        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_5_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
12      1        0x0000100001004000  1108716598.693735  0.005444  0.007656      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     544    0x00000eb0    3_0_0x00_16                  1            0x00      
12      9        0x0000000001004000  1108716598.693735  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     512    0x00000eb0    0_8_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      1        0x0000000001004001  1108716598.693951  0.000615  0.007576      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    3_0_0x00_16                  1            0x00      
13      7        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_6_0x07_528                 1            0x00      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      8        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    0_7_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
14      9        0x0000000001004001  1108716598.694007  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      574     512    0x43232544    0_8_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      10       0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_9_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      11       0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    0_10_0x07_528                1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.003632  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    1072   0x00000eb0    3_0_0x00_16                  1            0x00      
16      12       0x0000000001004000  1108716598.697367  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    0_11_0x07_528                1            0x00      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.000000  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    0_0_0x07_528                 1            0x00      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
17      1        0x0000000001004001  1108716598.700250  0.006299  0.013875      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     544    0x43232544    3_0_0x00_16                  1            0x00      
17      10       0x0000000001004001  1108716598.700250  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     512    0x43232544    0_9_0x07_528                 1            0x00      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

sctpDecode

You are probably wondering, what are the columns of sctpDecode all about. Well, they were useful for me in practical jobs. I will add more in due time, or if you give feedback to the anteater.

So what can be configured? Move to the sctpDecode/src directory and open sctpDecode.h.

The plugin computes the different checksums in use if enabled. By default they are disabled, because it adds useless runtime if somebody is not interested in that. So you switch them both on, as indicated above.

Save the file, recompile sctpDecode and rerun T2.

$ t2build sctpDecode

...

$ t2 -r ~/data/sctp-multi.pcap -w ~/results/sctp/sctp-multi -s
...
sctpDecode: aggregated status, type Bitfield: 0x01, 0x0c0f
...
$ tawk -V sctpStat=0x01

The sctpStat column with value 0x01 is to be interpreted as follows:

   bit | sctpStat | Description
   =============================================================================
     0 | 0x01     | Adler32 error

$

So the status reveals no CRC errors, but ADLER indicates errors, so we have a newer version here. If you look into the flow file note that the type bitfiled is replaced by the sctpType column listing all uniq appearing sctp stream types. And you see the ADLER error in each flow.

$ tcol sctp-multi_flows.txt
%dir  flowInd  flowStat            timeFirst          timeLast           duration  numHdrDesc  numHdrs  hdrDesc        ethVlanID  srcIP           srcIPCC  srcIPWho            srcPort  dstIP           dstIPCC  dstIPWho            dstPort  l4Proto  numPktsSnt  numPktsRcvd  numBytesSnt  numBytesRcvd  minPktSz  maxPktSz  avePktSize  stdPktSize  minIAT  maxIAT    aveIAT       stdIAT       pktps     bytps     pktAsm      bytAsm     sctpStat  sctpDSNum  sctpPID  sctpVTag    sctpType  sctpCntD_I_A  sctpCFlgs  sctpCCBF  sctpIS  sctpOS  sctpIARW  sctpIARWMin  sctpIARWiMax  sctpARW
A     12       0x0000000001004000  1108716598.697367  1108716598.751383  0.054016  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.019717  0.013504     0.005976828  74.05213  37914.69  0           0          0x01      11         0        0x00000eb0  0         4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     12       0x0000000001004001  1108716598.700651  1108716598.756477  0.055826  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.022678  0.0139565    0.006462127  71.6512   36685.41  0           0          0x01      11         0        0x43232544  0         4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     2        0x0000100001004000  1108716598.688291  1108716598.751383  0.063092  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.018223  0.0126184    0.005361295  79.24935  40575.67  0           0          0x01      1          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     2        0x0000000001004001  1108716598.688538  1108716598.756477  0.067939  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.0135878    0.006479933  73.59544  37680.86  0           0          0x01      1          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     3        0x0000000001004000  1108716598.689195  1108716598.752140  0.062945  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.01898   0.012589     0.005557677  79.43443  40670.43  0           0          0x01      2          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     3        0x0000000001004001  1108716598.689402  1108716598.756727  0.067325  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.013465     0.006579555  74.26662  38024.51  0           0          0x01      2          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     4        0x0000100001004000  1108716598.689195  1108716598.753271  0.064076  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0128152    0.005597543  78.03234  39952.56  0           0          0x01      3          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     4        0x0000000001004001  1108716598.689402  1108716598.756967  0.067565  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.013513     0.00608459   74.00281  37889.44  0           0          0x01      3          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     5        0x0000000001004000  1108716598.690095  1108716598.753271  0.063176  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0126352    0.005108401  79.14398  40521.72  0           0          0x01      4          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     5        0x0000000001004001  1108716598.693336  1108716598.756967  0.063631  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.0127262    0.005697675  78.57806  40231.96  0           0          0x01      4          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     6        0x0000100001004000  1108716598.690095  1108716598.760341  0.070246  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0140492    0.005889928  71.17843  36443.36  0           0          0x01      5          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     6        0x0000000001004001  1108716598.693336  1108716598.770863  0.077527  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0155054    0.007011673  64.49366  33020.75  0           0          0x01      5          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     7        0x0000000001004000  1108716598.693263  1108716598.760341  0.067078  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0134156    0.005683439  74.54008  38164.52  0           0          0x01      6          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     7        0x0000000001004001  1108716598.693951  1108716598.770863  0.076912  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0153824    0.006592538  65.00936  33284.79  0           0          0x01      6          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     8        0x0000000001004000  1108716598.693263  1108716598.761549  0.068286  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019427  0.0136572    0.005618318  73.22145  37489.38  0           0          0x01      7          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     8        0x0000000001004001  1108716598.693951  1108716598.771163  0.077212  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024675  0.0154424    0.006634399  64.75677  33155.47  0           0          0x01      7          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     9        0x0000000001004000  1108716598.693735  1108716598.761549  0.067814  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0135628    0.00574128   73.73109  37750.32  0           0          0x01      8          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     9        0x0000000001004001  1108716598.694007  1108716598.771163  0.077156  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024451  0.0154312    0.007122566  64.80377  33179.53  0           0          0x01      8          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     10       0x0000000001004000  1108716598.694950  1108716598.762308  0.067358  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0134716    0.005884205  74.23023  38005.88  0           0          0x01      9          0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     10       0x0000000001004001  1108716598.700250  1108716598.771310  0.071060  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024598  0.014212     0.007284279  70.36308  36025.89  0           0          0x01      9          0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.686079  1108716598.763435  0.077356  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      24          41           18776        34356         16        1072      782.3333    347.4483    0       0.008278  0.003223167  0.002523227  310.2539  242722    -0.2615385  -0.293232  0x01      0          0        0x00000eb0  1;10;0;3  6_1_0         0x07       0x0000    17      17      65535     65535        65535         65535
B     1        0x0000000001004001  1108716598.686375  1108716598.771526  0.085151  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      41          24           34356        18776         4         1072      837.9512    288.5713    0       0.013896  0.002076854  0.003394506  481.4976  403471.5  0.2615385   0.293232   0x01      0          0        0x43232544  2;11;3;0  6_0_0         0x07       0x0000    17      17      4096      4096         4096          4096
A     11       0x0000000001004000  1108716598.694950  1108716598.763435  0.068485  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022134  0.013697     0.005530534  73.00869  37380.45  0           0          0x01      10         0        0x00000eb0  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     11       0x0000000001004001  1108716598.700597  1108716598.771526  0.070929  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022732  0.0141858    0.005774313  70.49303  36092.43  0           0          0x01      10         0        0x43232544  0         5_0_0         0x07       0x0000    0       0       0         4294967295   0             0

Same happens to the packet file, so we go directly to the human readable config. If you like a human readable output set SCTP_CHNKSTR 1, recompile sctpDecode and rerun T2.

$ t2build sctpDecode

...

$ t2 -r ~/data/sctp-multi.pcap -w ~/results/sctp/sctp-multi -s
...
$

Now the type is human readable.

$ tcol sctp-multi_flows.txt
%dir  flowInd  flowStat            timeFirst          timeLast           duration  numHdrDesc  numHdrs  hdrDesc        ethVlanID  srcIP           srcIPCC  srcIPWho            srcPort  dstIP           dstIPCC  dstIPWho            dstPort  l4Proto  numPktsSnt  numPktsRcvd  numBytesSnt  numBytesRcvd  minPktSz  maxPktSz  avePktSize  stdPktSize  minIAT  maxIAT    aveIAT       stdIAT       pktps     bytps     pktAsm      bytAsm     sctpStat  sctpDSNum  sctpPID  sctpVTag    sctpTypeN                      sctpCntD_I_A  sctpCFlgs  sctpCCBF  sctpIS  sctpOS  sctpIARW  sctpIARWMin  sctpIARWiMax  sctpARW
A     12       0x0000000001004000  1108716598.697367  1108716598.751383  0.054016  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.019717  0.013504     0.005976828  74.05213  37914.69  0           0          0x01      11         0        0x00000eb0  DATA                           4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     12       0x0000000001004001  1108716598.700651  1108716598.756477  0.055826  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      4           4            2048         2048          512       512       512         0           0       0.022678  0.0139565    0.006462127  71.6512   36685.41  0           0          0x01      11         0        0x43232544  DATA                           4_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     2        0x0000100001004000  1108716598.688291  1108716598.751383  0.063092  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.018223  0.0126184    0.005361295  79.24935  40575.67  0           0          0x01      1          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     2        0x0000000001004001  1108716598.688538  1108716598.756477  0.067939  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.0135878    0.006479933  73.59544  37680.86  0           0          0x01      1          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     3        0x0000000001004000  1108716598.689195  1108716598.752140  0.062945  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.01898   0.012589     0.005557677  79.43443  40670.43  0           0          0x01      2          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     3        0x0000000001004001  1108716598.689402  1108716598.756727  0.067325  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.023467  0.013465     0.006579555  74.26662  38024.51  0           0          0x01      2          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     4        0x0000100001004000  1108716598.689195  1108716598.753271  0.064076  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0128152    0.005597543  78.03234  39952.56  0           0          0x01      3          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     4        0x0000000001004001  1108716598.689402  1108716598.756967  0.067565  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.013513     0.00608459   74.00281  37889.44  0           0          0x01      3          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     5        0x0000000001004000  1108716598.690095  1108716598.753271  0.063176  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019201  0.0126352    0.005108401  79.14398  40521.72  0           0          0x01      4          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     5        0x0000000001004001  1108716598.693336  1108716598.756967  0.063631  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021079  0.0127262    0.005697675  78.57806  40231.96  0           0          0x01      4          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     6        0x0000100001004000  1108716598.690095  1108716598.760341  0.070246  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0140492    0.005889928  71.17843  36443.36  0           0          0x01      5          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     6        0x0000000001004001  1108716598.693336  1108716598.770863  0.077527  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0155054    0.007011673  64.49366  33020.75  0           0          0x01      5          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     7        0x0000000001004000  1108716598.693263  1108716598.760341  0.067078  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.020442  0.0134156    0.005683439  74.54008  38164.52  0           0          0x01      6          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     7        0x0000000001004001  1108716598.693951  1108716598.770863  0.076912  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.02454   0.0153824    0.006592538  65.00936  33284.79  0           0          0x01      6          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     8        0x0000000001004000  1108716598.693263  1108716598.761549  0.068286  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.019427  0.0136572    0.005618318  73.22145  37489.38  0           0          0x01      7          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     8        0x0000000001004001  1108716598.693951  1108716598.771163  0.077212  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024675  0.0154424    0.006634399  64.75677  33155.47  0           0          0x01      7          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     9        0x0000000001004000  1108716598.693735  1108716598.761549  0.067814  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0135628    0.00574128   73.73109  37750.32  0           0          0x01      8          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     9        0x0000000001004001  1108716598.694007  1108716598.771163  0.077156  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024451  0.0154312    0.007122566  64.80377  33179.53  0           0          0x01      8          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     10       0x0000000001004000  1108716598.694950  1108716598.762308  0.067358  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.021395  0.0134716    0.005884205  74.23023  38005.88  0           0          0x01      9          0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     10       0x0000000001004001  1108716598.700250  1108716598.771310  0.071060  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.024598  0.014212     0.007284279  70.36308  36025.89  0           0          0x01      9          0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
A     1        0x0000100001004000  1108716598.686079  1108716598.763435  0.077356  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      24          41           18776        34356         16        1072      782.3333    347.4483    0       0.008278  0.003223167  0.002523227  310.2539  242722    -0.2615385  -0.293232  0x01      0          0        0x00000eb0  INIT;COOKIE-ECHO;DATA;SACK     6_1_0         0x07       0x0000    17      17      65535     65535        65535         65535
B     1        0x0000000001004001  1108716598.686375  1108716598.771526  0.085151  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      41          24           34356        18776         4         1072      837.9512    288.5713    0       0.013896  0.002076854  0.003394506  481.4976  403471.5  0.2615385   0.293232   0x01      0          0        0x43232544  INIT-ACK;COOKIE-ACK;SACK;DATA  6_0_0         0x07       0x0000    17      17      4096      4096         4096          4096
A     11       0x0000000001004000  1108716598.694950  1108716598.763435  0.068485  1           3        eth:ipv4:sctp  0          192.168.170.8   02       "private_reserved"  7        192.168.170.56  02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022134  0.013697     0.005530534  73.00869  37380.45  0           0          0x01      10         0        0x00000eb0  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
B     11       0x0000000001004001  1108716598.700597  1108716598.771526  0.070929  1           3        eth:ipv4:sctp  0          192.168.170.56  02       "private_reserved"  7        192.168.170.8   02       "private_reserved"  7        132      5           5            2560         2560          512       512       512         0           0       0.022732  0.0141858    0.005774313  70.49303  36092.43  0           0          0x01      10         0        0x43232544  DATA                           5_0_0         0x07       0x0000    0       0       0         4294967295   0             0
$

Same happens to the sctpChunkType_ field.

$ head -n 35 sctp-multi_packets.txt | tcol
%pktNo  flowInd  flowStat            time               pktIAT    flowDuration  numHdrs  hdrDesc        ethVlanID  srcMac             dstMac             ethType  srcIP           srcIPCC  srcIPWho          srcPort  dstIP           dstIPCC  dstIPWho          dstPort  l4Proto  pktLen  l7Len  sctpVerifTag  sctpChunkType_Sid_Flags_Len  sctpNChunks  sctpStat  l7Content
1       1        0x0000000001004000  1108716598.686079  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      78      32     0x00000000    INIT_0_0x00_32               1            0x01      
2       1        0x0000000001004001  1108716598.686375  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      174     128    0x43232544    INIT-ACK_0_0x00_128          1            0x01      
3       1        0x0000000001004000  1108716598.686862  0.000783  0.000783      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      150     104    0x00000eb0    COOKIE-ECHO_0_0x00_104       1            0x01      
4       1        0x0000000001004001  1108716598.687080  0.000705  0.000705      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      50      4      0x43232544    COOKIE-ACK_0_0x00_4          1            0x01      
5       1        0x0000100001004000  1108716598.688291  0.001429  0.002212      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_0_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
5       2        0x0000000001004000  1108716598.688291  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_1_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       1        0x0000000001004001  1108716598.688538  0.001458  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    SACK_0_0x00_16               1            0x01      
6       1        0x0000000001004001  1108716598.688538  0.000000  0.002163      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_0_0x07_528              1            0x01      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
6       2        0x0000000001004001  1108716598.688538  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_1_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       3        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_2_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
7       4        0x0000000001004000  1108716598.689195  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_3_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       1        0x0000000001004001  1108716598.689402  0.000864  0.003027      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    SACK_0_0x00_16               1            0x01      
8       3        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_2_0x07_528              1            0x01      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
8       4        0x0000000001004001  1108716598.689402  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_3_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       5        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_4_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
9       6        0x0000000001004000  1108716598.690095  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_5_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      7        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_6_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
10      8        0x0000000001004000  1108716598.693263  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_7_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      1        0x0000000001004001  1108716598.693336  0.003934  0.006961      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    SACK_0_0x00_16               1            0x01      
11      5        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_4_0x07_528              1            0x01      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
11      6        0x0000000001004001  1108716598.693336  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_5_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
12      1        0x0000100001004000  1108716598.693735  0.005444  0.007656      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     544    0x00000eb0    SACK_0_0x00_16               1            0x01      
12      9        0x0000000001004000  1108716598.693735  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      590     512    0x00000eb0    DATA_8_0x07_528              1            0x01      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      1        0x0000000001004001  1108716598.693951  0.000615  0.007576      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    1072   0x43232544    SACK_0_0x00_16               1            0x01      
13      7        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_6_0x07_528              1            0x01      ......6.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
13      8        0x0000000001004001  1108716598.693951  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      1118    512    0x43232544    DATA_7_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
14      9        0x0000000001004001  1108716598.694007  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      574     512    0x43232544    DATA_8_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      10       0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_9_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
15      11       0x0000000001004000  1108716598.694950  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1102    512    0x00000eb0    DATA_10_0x07_528             1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.003632  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    1072   0x00000eb0    SACK_0_0x00_16               1            0x01      
16      12       0x0000000001004000  1108716598.697367  0.000000  0.000000      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    DATA_11_0x07_528             1            0x01      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
16      1        0x0000100001004000  1108716598.697367  0.000000  0.011288      3        eth:ipv4:sctp             00:e0:18:b1:0c:ad  00:60:08:45:e4:55  0x0800   192.168.170.8   02       private_reserved  7        192.168.170.56  02       private_reserved  7        132      1118    512    0x00000eb0    DATA_0_0x07_528              1            0x01      ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
17      1        0x0000000001004001  1108716598.700250  0.006299  0.013875      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     544    0x43232544    SACK_0_0x00_16               1            0x01      
17      10       0x0000000001004001  1108716598.700250  0.000000  0.000000      3        eth:ipv4:sctp             00:60:08:45:e4:55  00:e0:18:b1:0c:ad  0x0800   192.168.170.56  02       private_reserved  7        192.168.170.8   02       private_reserved  7        132      590     512    0x43232544    DATA_9_0x07_528              1            0x01      ....\.7.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................
$

Have fun.