Ethereal-dev: Re: [Ethereal-dev] RFC1006

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Tue, 27 Mar 2001 00:03:45 -0800
On Sun, Mar 25, 2001 at 12:06:13PM -0600, Martin Thomas wrote:
> Enclosed is a new dissector for RFC1006. Andreas Sikkema wrote the tpkt
> dissector
> that this is based upon but that was only called from the Q.931
> dissector..
> Anyway, I reworked a little and it behaves like most of the other
> dissectors and
> calls COTP to handle any remaining data.

Hmm.

RFC 1006 describes TPKT as carrying the OSI transport protocol.

However, in the Q.931 dissector, it's carrying Q.931 - and doesn't run
on port 102.

Did all the H.whatever-atop-TCP/IP stuff just take the TPKT protocol and
hijack it for its own purposes?