Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Decoder for T.38 (Fax over IP)

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Wed, 15 Jun 2016 11:40:26 -0400


On Wed, Jun 15, 2016 at 1:50 AM, Rayne <hjazz6@xxxxxxxxx> wrote:
Hi all,

I noticed that "t38" and "t30" can be used as a filter in Wireshark 1.10.5, but I can't seem to find the source code for how such packets are decoded. (I can only find t35.c and t35.h in the epan directory).

So my question is can Wireshark actually detect then decode such packets? If so, where can I find the source code for it?


Look in epan/dissectors/packet-t38.c (and packet-t30.c).