Ethereal-dev: [Ethereal-dev] Re: About H.323 protocol decoding using Ethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Sat, 6 Jan 2001 17:30:00 -0800
On Sat, Jan 06, 2001 at 05:43:01PM +0800, lian.weiliang@xxxxxxxxxxxxxxx wrote:
> Mr. Guy Harris:

Mr. Guy Harris is not the only person who should be asked these
questions; I suspect you're dealing here with H.323, and Andreas Sikkema
is likely to be at least as familiar with that as I am, probably more,
so I'm CCing "ethereal-dev@xxxxxxxxxxxx" on this.

>    I have some question need your help.
>    Why can't i capture Q.931 RTP RTCP packet using ethereal?

You can *capture* it with Ethereal; the question is really why Ethereal
doesn't recognize the packets as being Q.931, RTP, or RTCP.

> Only these Ports Defined by ITU-T can be captured? for example
>      Q.931 TCP  port 1720
>      RTP   UDP port 5004
>      RTCP  UDP port 5005

If those ports are, in fact, reserved for those protocols, perhaps we
should make Ethereal recognize port 1720 as Q.931-inside-TPKT, and
recognize ports 5004 and 5005 as RTP and RTCP.

Andreas?