Wireshark-dev: Re: [Wireshark-dev] Help on H323 Port Filtering

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Fri, 09 Mar 2007 10:39:50 +0100
ARAMBULO, Norman R. wrote:
Hi,
Right now we are using tshark for capturing packets on our network and use it to translate, it seem theres a lot of packet loss. Is it possible to dissect or parse a captured packet for VOIP since some of its succeding packets were eventually lost, we have found some TPKT and Q.931 protocol and some are tcp ack. Another thing is, we tried filtering by port number and found out that port 1718, 1719, 1720 both udp and tcp were tag as either h323hostcall or h323gateway by wireshark, are the packets we captured are h323 voip calls? and can we dissect the data part which wireshark shows as data? Thanks and more power
Hi!

Please *don't* send mails to both user and developer mailing lists ...

And please don't use any animated pics ...

That's both just annoying!

Regards, ULFL