Ethereal-users: RE: [Ethereal-users] H323 RAS traffic

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Martin Regner" <martin.regner@xxxxxxxxx>
Date: Fri, 9 May 2003 21:25:44 +0100
>Is it posible to get the dump of RAS traffic as I need it for
>some of my applications.


I'm not sure what you mean with "get the dump of RAS traffic" .

If you are running Ethereal on Windows you could install the H.323 plugin (for info see www.voice2sniff.org) then you Ethereal
should be able to see the H.323 traffic decoded.

You could then use a display filter "h225 and udp" to filter out the H.225-RAS messages, or
"h225 or h245" to filter out the H.323 packets.

If you want to just capture H323 RAS traffic then you could use a capture filter to just capture the packets set to or from
certain udp port numbers, e.g a filter  "udp port 1720 or udp port 1719" might work.

Depending on what you mean with "get the dump of RAS traffic" you could e.g. print the decoded packets to a text-file (including the hex data if you want) or maybe save just the filtered packets into a new capture file and parse that binary pcap-file in your application or similar. 

Regards,
 Martin