Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] [Fwd: Patch for VoIP]

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Olivier GRALL <olivier.grall@xxxxxxxxxx>
Date: Tue, 22 Feb 2005 10:33:07 +0100
I don't use "ras in q931 facility", I use a TCP connection as a tunnel and I use it to send or receive H323 messages.

I need to verify the messages because there are address and port translations in the H323 messages. The first step is to add the 2 patches I sent (only 1 line to add in 2 files). Then I will be able to make my own dissector for this TCP Connection. This dissector will call the RAS dissector or the Q931 dissector when an H323 messages is sent.

For the moment I can only share a file from server side where you can see the TCP connection and a RRQ/RCF dial for example.

Olivier.


LEGO a écrit :

do you have any capture of those "ras in q931 facility" packets you can share?
Luis

On Mon, 21 Feb 2005 14:16:50 +0100, Olivier GRALL
<olivier.grall@xxxxxxxxxx> wrote:
Hello,

I come back to explain a bit more my needs. I use only ONE tcp connexion
to transport all H323 messages (RAS, Q931, H245). I want to see if my
H323 messages are OK. But with ethereal, the overhead of the packets and
the only one TCP connection don't permit to call the right dissectors.

My 2 patches permit to call the RAS dissector and the Q931 dissector in
a good way from everywhere. It may be usefull for other cases.

Thanks,

Olivier GRALL.

-------- Message original --------
Sujet:  Patch for VoIP
Date:   Tue, 08 Feb 2005 18:33:21 +0100
De:     Olivier GRALL <olivier.grall@xxxxxxxxxx>
Pour:   ethereal-dev@xxxxxxxxxxxx

Hello,

I need to look at H323 communications over tunnels. So, I tried 2 minor
changes.

I would like to submit these changes if it's possible in epan/dissectors.

I need to be able to call RAS dissector for IP ports different from 1718
and 1719. And I also need to dissect encapsulated Q931 messages with
tpkt. The only way I found to do it is in the patches. I prepared the
patches from last SVN source code.

Thanks a lot in advance.

Olivier GRALL


--- packet-h225.c       2005-02-08 18:22:55.028461224 +0100
+++ packet-h225.c.old   2005-02-08 18:20:14.762825304 +0100
@@ -12237,7 +12237,6 @@
               &h225_reassembly);

  new_register_dissector("h225", dissect_h225_H323UserInformation, proto_h225);
-  new_register_dissector("h225ras", dissect_h225_RasMessage, proto_h225);
  new_register_dissector("h323ui",dissect_h225_H323UserInformation, proto_h225);

  nsp_object_dissector_table = register_dissector_table("h225.nsp.object", "H.225 NonStandardParameter (object)", FT_STRING, BASE_NONE);


--- packet-q931.c       2005-02-08 18:23:47.995409024 +0100
+++ packet-q931.c.old   2005-02-08 18:20:21.894741088 +0100
@@ -3165,7 +3165,6 @@
           proto_q931);
       register_dissector("q931.ie", dissect_q931_ie_cs0, proto_q931);
       register_dissector("q931.ie.cs7", dissect_q931_ie_cs7, proto_q931);
-       register_dissector("q931tpkt", dissect_q931_tpkt_pdu, proto_q931);

       /* subdissector code */
       codeset_dissector_table = register_dissector_table("q931.codeset", "Q.931 Codeset", FT_UINT8, BASE_HEX);


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev




_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev


Attachment: RRQ_RCF
Description: Binary data