Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 5848] New: H.323 RAS packets missing from packet counts in

Date: Mon, 18 Apr 2011 20:33:15 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5848

           Summary: H.323 RAS packets missing from packet counts in
                    "Telephony->VoIP Calls" and the "Flow Graph" for the
                    call.
           Product: Wireshark
           Version: 1.4.4
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Major
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: ericn1234@xxxxxxxxx


Created an attachment (id=6185)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6185)
pcap of a simple H.323 video call using a gatekeeper.

Build Information:
wireshark 1.4.4

Copyright 1998-2011 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GTK+ 2.24.3, with GLib 2.28.5, with libpcap 1.1.1, with
libz 1.2.5, with POSIX capabilities (Linux), with libpcre (version unknown),
without SMI, without c-ares, without ADNS, without Lua, with Python, with
GnuTLS
2.10.5, without Gcrypt, without Kerberos, without GeoIP, without PortAudio,
without AirPcap.

Running on Linux 2.6.36-gentoo-r5, with libpcap version 1.1.1, with libz 1.2.5,
GnuTLS 2.10.5.

Built using gcc 4.5.2.

--
For H.323 calls using a gatekeeper, the call related H.225 RAS packets are no
longer included in the "Graph Analysis" of the H.323 VoIP call.  The missing
packets are:
   - admissionRequest
   - admissionConfirm
   - admissionReject
   - disengageRequest
   - disengageConfirm
   - disengageReject

Back in version 1.0.3 and 1.0.4 these packets were included in the call graph. 
I have not been able to check versions between 1.0.4 and 1.4.3 to narrow down
when the feature went missing.

I am attaching a pcap of a simple H.323 video call using a gatekeeper to
demonstrate the issue.

I am also attaching saved text call graphs from a version 1.0.3 wireshark and a
version 1.4.4 wireshark to demonstrate the missing packets.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.