Ethereal-dev: [Ethereal-dev] Re: [Ethereal-users] Hello !!

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Wed, 20 Jun 2001 17:10:03 -0700 (PDT)
> First of all thank you very much for your response. When I was
> asking this, I meant that I have captured the packet, I am asbolutely
> sure that this packet is a q.931 setup for example but I cannot see
> the q.931 decoded part from the ethereal.

It's TCP traffic from port 1044 to port 2720.

Presumably this means that, somehow, the heuristic checks for
Q.931-inside-TPKT aren't working (or that it's not inside TPKT; Ethereal
has no code that would recognize Q.931-inside-something-else-atop-TCP).

Without a copy of the capture file, I can't determine why this might be.
Perhaps Andreas Sikkema (author of the Q.931-inside-TPKT stuff) can
guess, but he might well need more data as well.