Ethereal-dev: Re: [Ethereal-dev] Q.931 patch - reassembly of segmented messages

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 20 Feb 2004 20:24:27 -0800
On Fri, Feb 20, 2004 at 06:32:11PM +0100, Martin Regner wrote:
> The segmentation used for Q.931 (by using Segment message) is really not
> relevant for Q.931 when used in H.225.
> H.225.0 is just use a subset of Q.931.
> "Segment message shall not be used" according to H.225.0, and there is "no
> critical upper limit of message size" when used in H.323/H.225.0.
> As you say the desegementation of H.225/Q.931 messages should be handled by
> using TPKT.
> We will probably notice quite soon if H.323 dissection is affected by the
> changes, but I guess that it is not.

If it is affected by the changes, then either

	1) whoever sent the traffic being dissected violated H.225.0,
	   because they're using Segment messages

or

	2) there's a bug that's *not* unique to H.323, because the
	   changes affect the dissection of non-segmented messages.