Ethereal-dev: [Ethereal-dev] Need help with H.223 that spans multiple TVBs

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "wangzhe" <wangzhe@xxxxxxxxxxx>
Date: Tue, 28 Mar 2006 09:49:12 +0800
Hi guys:
	These days, we use Ethereal to dissect some protocol stacks. The struct of the stack like this:

 high level         <----->           low level
 H.245(Audio,Video code)--H.223--IUUP--RTP--UDP...

As we know, Ethereal can auto dissect stream until RTP protocol, and we made some improvements, it can auto dissect until IUUP. but problem occurs.
	According to the H.223 protocol annex A, h.223's PDU is separated by flag 0x87B2, and because of the protocol data is carried by RTP, one H.223 protocol data may be spans multiple TVBS. The question is how can i reassemble split IUUP packets to make a complete h.223 package. I tried the way i found in "Ethereal Developer's Guide", but it doesn't work. furthermore, I can not completely understand these two functions:"fragment_add_seq_check" and "process_reassembled_data", could someone please also tip me something about them. I 'v pasted some capture data here. 
    Any suggestion is welcome.
		                                                                

	

        
 				

        wangzhe
        wangzhe@xxxxxxxxxxx
          2006-03-28

Attachment: capture.cap
Description: Binary data

BEGIN:VCARD
VERSION:2.1
N:wangzhe;
FN:wangzhe
NOTE;ENCODING=QUOTED-PRINTABLE:blog:  http://blog.donews.com/JerryKing
=BB=B6=D3=AD=D3=EB=CE=D2=CC=D6=C2=DBPython=A3=AC=D7=EE=BD=FC=B5=C4=D1=D0=
=BE=BF=CF=EE=C4=BF=A3=BATkinter
EMAIL;PREF;INTERNET:wangzhe@xxxxxxxxxxx
REV:20060328T094912Z
END:VCARD