[arif wijalmoko <wijalmokoarif@xxxxxxxxx>]

I have tried to capture voip traffic with my configuration, but I always get info ( CS : empty terminal ..., etc ) in h245 protocol information. What is that info mean ?, Does that info make problem when I try to filter h225 protokol ?

Ronnie Sahlberg <ronnie_sahlberg@xxxxxxxxxxxxxx> wrote:

Some H.225 packets carry H.245 as payload.
Ethereal always places the topmost protocol in the summary pane.

CS for H.225 means that it is a CS PDU and not a RAS PDU.

----- Original Message -----
From: arif wijalmoko
To: ethereal-users@xxxxxxxxxxxx
Sent: Friday, October 24, 2003 8:00 PM
Subject: [Ethereal-users] Filter h225 and h245 problem


Dear All,

I have captured voip trafic, with confguration :

Phone --> PBX --> Linejack gateway ( with software Open H323 PSTN Gateway )
on OS Windows 2000 prof --> OpenH323 IVR on OS Linux RedHat 9, and Ethereal
aplication (version 0.9.15, with WinPcap 3.0 on Windows 2000 prof ) in other
computer under the same LAN.

I had succesfully capture voip trafic. When I filter h225 protocol with this
syntax :

>tethereal -r openivr -R h225

17 35.091637 167.205.64.164 -> 167.205.64.162 H.225.0 CS: setup
OpenLogicalChannel 911
19 35.173742 167.205.64.162 -> 167.205.64.164 H.225.0 CS: callProceeding
182
23 35.370194 167.205.64.162 -> 167.205.64.164 H.245 CS: connect
OpenLogicalChannel TerminalCapabilitySet TerminalCapabilitySetAck
MasterSlaveDeterminationAck 421
45 35.804589 167.205.64.164 -> 167.205.64.162 H.245 CS: empty
TerminalCapabilitySetAck MasterSlaveDeterminationAck 85
48 35.807435 167.205.64.162 -> 167.205.64.164 H.245 CS: empty
RoundTripDelayRequest 82
52 35.863096 167.205.64.164 -> 167.205.64.162 H.245 CS: empty
RoundTripDelayResponse 82
896 48.626101 167.205.64.162 -> 167.205.64.164 H.245 CS: empty
CloseLogicalChannel 87
901 48.733747 167.205.64.164 -> 167.205.64.162 H.245 CS: empty
CloseLogicalChannelAck 83
905 48.782127 167.205.64.162 - > 167.205.64.164 H.245 CS: releaseComplete
EndSessionCommand 108
906 48.782924 167.205.64.162 -> 167.205.64.164 H.245 CS: empty
RequestChannelClose 87

there was another protocol ( h245 ) dispaly by tethereal. I don't know why
that was happened ?, What is CS mean in info of h225 protocol ? Could
someone help me out here, I'd greatly appreciate it.


Thanks,
Arif.


Want to chat instantly with your online friends? Get the FREE Yahoo!
Messenger



_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

---

Want to chat instantly with your online friends?�Get the FREE Yahoo!
Messenger