Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Q.931 Display Filter Help

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Wed, 13 Jul 2005 15:27:23 +0200
MATE (http://wiki.ethereal.com/Mate) can do that.

in http://wiki.ethereal.com/Mate_2fExamples you can find the
H323-Calls  example with which to start from.

You'll need to mark the "Gop"  whenever a call-procceding request
comes, and after that filter for those gops that are not yet  marked.

Luis

On 7/13/05, Keith French <keithfrench@xxxxxxxxxxxxx> wrote:
>  
> Is there a way within Ethereal to build a display filter that will find a
> Q931 Setup packet that has no Call Proceeding packet within the same call
> reference value? I have a trace with lots of calls on it, so the call ref
> value changes with each call. 
>   
> Keith French. 
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.323 / Virus Database: 267.8.13/47 - Release Date: 12/07/2005
> 
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 
> 
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan