Revision history [back]

For some reason, I cannot figure out the magic of getting Wireshark to auto decode H.225 and H.245 from H.323 captures. I am running 2.4.2 [latest].

Sometimes Wireshark does figure it out on it's own and shows the port TCP:1720 H.225 decoding, and also the TCP:dynamic-port H.245 decoding, but just as often as it succeeds, it does not.

The best way to test this is to try the Wireshark Wiki sample H.323 capture, found here: https://wiki.wireshark.org/SampleCaptures
https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=rtp_example.raw.gz [direct file link]

If somebody [or Gerard, bless him], could explain how to get this to operate reliably, I would be quite appreciative.

Regards, Cameron Elliott

For some reason, I cannot figure out the magic of getting Wireshark to auto decode H.225 and H.245 from H.323 captures. I am running 2.4.2 [latest].

Sometimes Wireshark does figure it out on it's own and shows the port TCP:1720 H.225 decoding, and also the TCP:dynamic-port H.245 decoding, but just as often as it succeeds, it does not.

The best way to test this is to try the Wireshark Wiki sample H.323 capture, found here: https://wiki.wireshark.org/SampleCaptures
https://wiki.wireshark.org/SampleCaptures?action=AttachFile&do=get&target=rtp_example.raw.gz [direct file link]

If somebody [or Gerard, Gerald, bless him], could explain how to get this to operate reliably, I would be quite appreciative.

Regards, Cameron Elliott