On Thu, Jan 16, 2003 at 03:04:06PM +0100, Alberto Corradini wrote:
> i have a question about etehreal and VoIP traffic; we are setting up a
> Network with a Cisco Gatekeeper and 2 Win 2000 client running MS
> Netmeeting. Everything works properly but when we try to capture the
> traffic of a h.323 session, we see the q.931 messages as [Short Frame],
> we cannot distinguish beetween Setup, Call Proceeding and so on.
Have you enabled desegmentation of TCP streams? Select "Preferences"
from the "Edit" menu, open up the "Protocols" item in the left-hand pane
of the "Preferences" dialog box, select "TCP" from that list, turn on
"Allow subdissector to desegment TCP streams", click "Save" so that the
setting is saved, and click "OK".
> Again, we cannot see RTP traffic, we only see generic UDP traffic.
http://www.ethereal.com/faq.html#q5.18