Wireshark · Ethereal-dev: Re: [Ethereal-dev] RFC1006

[Guy Harris <gharris@xxxxxxxxxxxx>]

On Sun, Mar 25, 2001 at 12:06:13PM -0600, Martin Thomas wrote:
> Enclosed is a new dissector for RFC1006. Andreas Sikkema wrote the tpkt
> dissector
> that this is based upon but that was only called from the Q.931
> dissector..
> Anyway, I reworked a little and it behaves like most of the other
> dissectors and
> calls COTP to handle any remaining data.

Hmm.

RFC 1006 describes TPKT as carrying the OSI transport protocol.

However, in the Q.931 dissector, it's carrying Q.931 - and doesn't run
on port 102.

Did all the H.whatever-atop-TCP/IP stuff just take the TPKT protocol and
hijack it for its own purposes?