Wireshark · Ethereal-users: [Ethereal-users] Filter h225 and h245 problem

[arif wijalmoko <wijalmokoarif@xxxxxxxxx>]

Dear All,

 

I have been captured voip trafic, with confguration :

 

Phone --> PBX --> Linejack gateway ( with software Open H323 PSTN Gateway ) on OS Windows 2000 prof  --> OpenH323 IVR on OS Linux RedHat 9, and Ethereal aplication (version 0.9.15, with WinPcap 3.0 on Windows 2000 prof ) in other computer under the same LAN.

 

I had succesfully capture voip trafic. When I filter h225 protocol with this syntax :

 

>tethereal -r openivr -R h225

 

17  35.091637 167.205.64.164 -> 167.205.64.162 H.225.0 CS: setup  OpenLogicalChannel  911
19  35.173742 167.205.64.162 -> 167.205.64.164 H.225.0 CS: callProceeding  182
23  35.370194 167.205.64.162 -> 167.205.64.164 H.245 CS: connect OpenLogicalChannel TerminalCapabilitySet TerminalCapabilitySetAck MasterSlaveDeterminationAck 421
45  35.804589 167.205.64.164 -> 167.205.64.162 H.245 CS: empty TerminalCapabilitySetAck MasterSlaveDeterminationAck  85
48  35.807435 167.205.64.162 -> 167.205.64.164 H.245 CS: empty RoundTripDelayRequest  82
 52  35.863096 167.205.64.164 -> 167.205.64.162 H.245 CS: empty RoundTripDelayResponse  82
896  48.626101 167.205.64.162 -> 167.205.64.164 H.245 CS: empty CloseLogicalChannel  87
901  48.733747 167.205.64.164 -> 167.205.64.162 H.245 CS: empty CloseLogicalChannelAck  83
905  48.782127 167.205.64.162 -> 167.205.64.164 H.245 CS: releaseComplete EndSessionCommand  108
906  48.782924 167.205.64.162 -> 167.205.64.164 H.245 CS: empty RequestChannelClose  87

 

there was another protocol ( h245 ) dispaly by tethereal. I don't know why that was happened ?, What is CS mean in info of h225 protocol ? Could someone help me out here, I'd greatly appreciate it.

 Thanks,

Arif.

---

Want to chat instantly with your online friends? Get the FREE Yahoo!
Messenger

Attachment: openivr1
Description: openivr1