Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Okay Jaap, thanks for your help and persistence. I have located the issue. Here is how to reproduce the issue in WS 2.4.2, likely older versions also:

  1. Install WS 2.4.2 on a new system OR delete the WS user config files found in APPDATA\Wireshark prior to opening WS.
  2. This will give you a fairly good baseline for testing.
  3. Download 'rtp_sample.pcap' from https://wiki.wireshark.org/SampleCaptures
  4. Open 'rtp_sample.pcap' with WS
  5. You will see both H225 and H245 level decoding of TCP sessions
  6. This is how I accidentally broke H225 and H245 decoding:
  7. To break H225/H245 dedode: Enable all protocols via Analyze>Enabled Protocols...>Enable all>OK
  8. You will see that H225/H245 decoding has disappeared
  9. It seems the only way to get the Enabled Protocols selections back to default is to delete APPDATA\Wireshark.

Suggested fix: Create a 'Restore to defaults' button in the Enabled Protocols window.

Okay Jaap, thanks for your help and persistence. I have located the issue. Here is how to reproduce the issue in WS 2.4.2, likely older versions also:

  1. Install WS 2.4.2 on a new system OR delete the WS user config files found in APPDATA\Wireshark prior to opening WS.
  2. This will give you a fairly good baseline for testing.
  3. Download 'rtp_sample.pcap' from https://wiki.wireshark.org/SampleCaptures
  4. Open 'rtp_sample.pcap' with WS
  5. You will see both H225 and H245 level decoding of TCP sessions
  6. This is how I accidentally broke H225 and H245 decoding:
  7. To break H225/H245 dedode: Enable all protocols via Analyze>Enabled Protocols...>Enable all>OK
  8. You will see that H225/H245 decoding has disappeared
  9. It seems the only way to get the Enabled Protocols selections back to default is to delete APPDATA\Wireshark.APPDATA\Wireshark [when WS is closed].

Suggested fix: Create a 'Restore to defaults' button in the Enabled Protocols window.