http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2368
Summary: Wireshark decodes all G.711 packets as T.38 after a SIP
reinvite for T.38.
Product: Wireshark
Version: 0.99.8
Platform: PC
OS/Version: Windows XP
Status: NEW
Severity: Normal
Priority: Medium
Component: Wireshark
AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
ReportedBy: hscohen@xxxxxxx
Build Information:
Version 0.99.8 (SVN Rev 24492)
Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 7.0, with SMI 0.4.5, with ADNS, with Lua 5.1,
with
GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio V19-devel,
with AirPcap.
Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.
Built using Microsoft Visual C++ 6.0 build 8804
--
A VoIP call is set up with G.729 audio.
The answerer detects fax and reinvites G.711. The call changes to G.711 audio.
The caller detects fax and reinvites T.38 (packet 6957). The answerer sends
"488 Not Acceptable Here" and the call continues in G.711 audio.
However, starting immediately after the T.38 reinvite, Wireshark decodes all
G.711 packets as T.38 (starting with packet 6961).
The only way to make Wireshark decode these G.711 packet correctly is to write
the capture without the T.38 reinvite.
--
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.