PPID==7 does not work in the sense that iti is not decoded , however filtering on sctp data payload ==7 delivers exactly the packets one would expect and where one would expect them , so rather weird.
/wbr Ariel Burbaickij On Jan 12, 2008 11:41 PM, Anders Broman <[EMAIL PROTECTED]> wrote: > Hi, > It does on my traces but if H248 is not detected in yours the filter won't > work. At a glance at the code SCTP port does not work for H.248(not > implermented(yet)) ppid *should* work. > Regards > Anders > > -----Ursprungligt meddelande----- > Från: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] För Ariel Burbaickij > Skickat: den 12 januari 2008 17:02 > Till: wireshark-users@wireshark.org > Ämne: Re: [Wireshark-users] h.248 over SCTP > > > Hello Anders, > glad to see your again, > I will provide detailed answers on Monday, 14.01.2007 as I am > away from equipment. However, if I understand the nature of your > questions correctly -- they imply that there are some limitations. > Is it correct? How about the fact that filter h248 does not work > in case of tranfer over SCTP? > > /wbr > Ariel Burbaickij > On Jan 12, 2008 12:50 PM, Anders Broman <[EMAIL PROTECTED]> wrote: > > Hi, > > Traces I have of H.248 over SCTP decodes... > > Is PPID 7 used? Is it Binary or text? > > Can you send a small sample trace? > > Regards > > Anders > > > > -----Ursprungligt meddelande----- > > Från: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] För Ariel Burbaickij > > Skickat: den 12 januari 2008 11:02 > > Till: wireshark-users@wireshark.org > > Ämne: [Wireshark-users] h.248 over SCTP > > > > > > Hello all, > > we use h.248 over SCTP and wireshark behaves in such a way that I at least > > need your advise as of now I still hesistate to submit bug report. > > We observe following: > > 1) It is not possible to filter on h248 or MEGACO filters user needs > > to enter sctp protocol payload > > number in order to get the packets of interest. > > 2) h.248 content is not being decoded properly, also after applying > > "decode as..." functionality > > > > 3) it is not possible to select H.248/MEGACO if decode should be based > > on port and not on PPID > > > > Question: Is all this known bugs/behaviour, do I do something wrong > > while working with it or should I submit > > bug report? > > > > > > /wbr > > Ariel Burbaickij > > _______________________________________________ > > Wireshark-users mailing list > > Wireshark-users@wireshark.org > > http://www.wireshark.org/mailman/listinfo/wireshark-users > > > > _______________________________________________ > > Wireshark-users mailing list > > Wireshark-users@wireshark.org > > http://www.wireshark.org/mailman/listinfo/wireshark-users > > > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
