Guy Harris <guy@xxxxxxxxxxxx> wrote:
> 2. ... Some H.225 signalling messages are
> big, so they have a good chance to be divided into two TCP packets by
> the OS. When this happens, the first packet will be decoded as "Q.931
> [short frame]" and the second packet isn't decoded at all.
>
> Go to the "Edit->Preferences" menu item, click in the "[+]" box next
> to "Protocols in the dialog box it opens up, click on "TCP", turn on
> the "Allow subdissector to desegment TCP streams" option, then click
> on "Q.931" and, if the "Desegment all Q.931 messages spanning multiple
> TCP segments" option isn't on, turn it on as well.
>
> Then click "Save" and "OK".
Is the fact that a user went as far as implementing an alternate feature
to get the functionality they wanted evidence enough that the controls
for redissection are not intuitive to a new user?
How could this be fixed?
I'm thinking that there should be something to help the user when they
right click on a packet.
My initial thought was a reassembly entry...
I'm now thinking that it might be nice to have "Protocol Options" as an
entry. I imagine that only the protocols listed in the packet would be
listed.
