Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3219] New: Statistics/Voip Calls does not associate packet

Date: Thu, 22 Jan 2009 07:53:05 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3219

           Summary: Statistics/Voip Calls does not associate packets to the
                    correct H.323 call if it contains a H.450
                    GroupIndication
           Product: Wireshark
           Version: 1.0.5
          Platform: PC
        OS/Version: Windows Vista
            Status: NEW
          Severity: Major
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: gd@xxxxxxxxxxxxxxx


Created an attachment (id=2698)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2698)
capture of a single call, which is displayed as two calls

Build Information:
Version 1.0.5 (SVN Rev 26954)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows Vista, build 6000, with WinPcap version 4.0.2 (packet.dll
version 4.0.0.1040), based on libpcap version 0.9.5, without AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
If the H.323 packet (setup or facility) contains a H.450-5 GroupIndicationOn or
GroupIndicationOff, the callPickupId with this GroupIndication is treated as it
was the CallIdentifier and used to match the packet to a call

The attached capture contains a single call. The Setup of this call contains a
GroupIndication, the Connect contains no Facility.

Wireshark identifies 2 calls, one with the Setup and the other with the
Connect.

If I change the callPickupId so that it is the same as the callIdentifier only
one call is found.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.