Ethereal-users: Re: [Ethereal-users] Q.931

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 16 Jan 2003 11:26:05 -0800
On Thu, Jan 16, 2003 at 03:04:06PM +0100, Alberto Corradini wrote:
> i have a question about etehreal and VoIP traffic; we are setting up a
> Network with a Cisco Gatekeeper and 2 Win 2000 client running MS
> Netmeeting.  Everything works properly but when we try to capture the
> traffic of a h.323 session, we see the q.931 messages as [Short Frame],
> we cannot distinguish beetween Setup, Call Proceeding and so on.

Have you enabled desegmentation of TCP streams?  Select "Preferences"
from the "Edit" menu, open up the "Protocols" item in the left-hand pane
of the "Preferences" dialog box, select "TCP" from that list, turn on
"Allow subdissector to desegment TCP streams", click "Save" so that the
setting is saved, and click "OK".

> Again, we cannot see RTP traffic, we only see generic UDP traffic.

	http://www.ethereal.com/faq.html#q5.18