Ethereal-dev: [Ethereal-dev] Re: About H.323 protocol decoding using Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 6 Jan 2001 17:30:00 -0800
On Sat, Jan 06, 2001 at 05:43:01PM +0800, lian.weiliang@xxxxxxxxxxxxxxx wrote:
> Mr. Guy Harris:

Mr. Guy Harris is not the only person who should be asked these
questions; I suspect you're dealing here with H.323, and Andreas Sikkema
is likely to be at least as familiar with that as I am, probably more,
so I'm CCing "ethereal-dev@xxxxxxxxxxxx" on this.

>    I have some question need your help.
>    Why can't i capture Q.931 RTP RTCP packet using ethereal?

You can *capture* it with Ethereal; the question is really why Ethereal
doesn't recognize the packets as being Q.931, RTP, or RTCP.

> Only these Ports Defined by ITU-T can be captured? for example
>      Q.931 TCP  port 1720
>      RTP   UDP port 5004
>      RTCP  UDP port 5005

If those ports are, in fact, reserved for those protocols, perhaps we
should make Ethereal recognize port 1720 as Q.931-inside-TPKT, and
recognize ports 5004 and 5005 as RTP and RTCP.

Andreas?