Wireshark · Ethereal-dev: [Ethereal-dev] Re: [Ethereal-users] H.323? is there a version for Windows?

[andreas.sikkema@xxxxxxxxxxx]

> Thanks for the info - works a treat. Is there a way to add what you have
> done to the latest version of Ethereal 0.9.1?

Thanks, it should do that ;-)

Anyway, I would LOVE to have my H.323 stuff working in such a form that
I can create a plugin with it. Unfortunately, last time I tried (0.8.18
I think it was) I couldn't get the linker to trust me on this and create
a plugin (on WIN32)... With luck I'll have some time at the end of this
month, so I'm going to try it again.

I also have some conceptual problems.

H323 is a couple of protocols stacked onto each other.
There's H.225 RAS which is simple straightforward UDP.
H.225 Call signalling is TPKT + Q.931 + H.225 CS
H.245 is TPKT + H245
And there is off course the media, RTP and RTCP

So from the existing Q.931 dissector I would try to load my H.225 plugin. To be able to decode
H.245 I have to tell the H.245 dissector from thew H225 dissector which conversation(s) it can
dissect. From H.245 I have to tell the RTP/RTCP dissectors which conversations they should
dissect.

I don't think you can do this with only adding a H.225 and H.245 dissector, I would have to do
some magic in the plugin interface by exposing the RTP/RTCP and TPKT dissectors...

Including my own RTP/RTCP/Q931/TPKT dissectors in the plugin would not be so nice I
suppose ;-)

--
Andreas Sikkema
andreas.sikkema@xxxxxxxxxxx
"While you're waiting, read the free novel we sent you.
 It's a Spanish story about a guy named `Manual'" - Dilbert