Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 2368] Wireshark decodes all G.711 packets as T. 38 after a SIP reinvite for T.38.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 4 Aug 2008 05:35:43 -0700 (PDT)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2368





--- Comment #4 from LEGO <luis.ontanon@xxxxxxxxx>  2008-08-04 05:35:42 PDT ---
This is a hard one to get it fixed... RTP chooses the subdissector to use based
on what has been learnt by SDP.

The issue here is that here:
 A frame containing SDP changes the subdissector to T.38, and there's no way
for SDP to know that the change was rejected in a later frame.

A mechanism needs to be engineered to allow SIP (and other RTP users) to inform
SDP/RDP that a given description was rejected so it has to go back to the prior
sub_dissector. (This is not easy to do at all).

I do not know which state was t38 at the time of Ethereal 0.10.6 but I guess it
was not there yet. So my guess is that the change of subdissector failed
because no subdissector for T38 is found (this needs to be verified). 

\Lego


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

  • Prev by Date: [Wireshark-bugs] [Bug 2368] Wireshark decodes all G.711 packets as T. 38 after a SIP reinvite for T.38.
  • Next by Date: [Wireshark-bugs] [Bug 2767] tshark-1.0.2 (dumpcap) signal abort core saved
  • Previous by thread: [Wireshark-bugs] [Bug 2368] Wireshark decodes all G.711 packets as T. 38 after a SIP reinvite for T.38.
  • Next by thread: [Wireshark-bugs] [Bug 2673] Incorrect comments in radius/dictionary.nokia
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation