Hello, Guy Harris,
Thanks.
I want to dump the mgcp package and analyse them.
I'm using the tehreal,set the filter(port 2427,2727,as you mention),it works.
CommandLine:
/usr/sbin/tethereal -n -i eth0 -s 8192 -tad -R "udp.port == 2427 and not ip.addr == 192.168.63.116 and ip.len lt 750 and not frame[42:4] == 41:55:45:50" -w ../log/$time.cap
Then the tethreal would capture the log as the following:
2003-10-30 12:15:32.0646 10.18.13.15 -> 10.15.204.52 MGCP 200 82952 OK
2003-10-30 12:15:32.0876 10.15.204.52 -> 10.18.13.15 MGCP CRCX 82953 aaln/3@xxxxxxxxxxxxx MGCP 1.0
2003-10-30 12:15:32.1250 10.18.13.15 -> 10.15.204.52 MGCP 200 82953 OK
2003-10-30 12:15:32.1371 10.15.204.52 -> 10.18.13.15 MGCP MDCX 82954 aaln/3@xxxxxxxxxxxxx MGCP 1.0
2003-10-30 12:15:32.1408 10.18.13.15 -> 10.15.204.52 MGCP 200 82954 OK
2003-10-30 12:15:32.1418 10.15.204.52 -> 10.18.13.15 MGCP MDCX 82955 aaln/3@xxxxxxxxxxxxx MGCP 1.0
2003-10-30 12:15:32.1450 10.18.13.15 -> 10.15.204.52 MGCP 200 82955 OK
According to this log,does the dissectors(mgcp) plugin being working? If not,how can I make him work?
It seems that the tethreal is working ,because it print the MGCP info.Right?
When I compile the ethreal,it tell me that GTk doesn't exiting.
But when I compile the GTK,it tell me that it needs xserver.
Do any option to disable ethreal,but enable the tethreal only?
I try --disable-ethreal option,but failed. The help message aslo not mention that.
======= At 2003-10-29, 03:04:00 you wrote: =======
>On Wed, Oct 29, 2003 at 05:28:43PM +0800, MaFai wrote:
>> There is no document tell me how to run mgcp plugin in the command
>> line.
>
>You can't run an Ethereal plugin - it's a dynamically-loaded module, not
>a program. You can only run Ethereal or Tethereal, which will call the
>MGCP plugin to dissect packets on the ports specified for it (defaulting
>to TCP and UDP ports 2427 and 2727).
>
>> Can it run in command line?
>
>Plugin dissectors can run as part of Ethereal or Tethereal. Ethereal
>can be run from the command line, but it requires a GUI; Tethereal can
>run without a GUI (in fact, it has no GUI code).
>
>>Because we have no x-windows in the linux.
>
>Well, that explains why you get that "cannot open display" warning - if
>you don't have an X server, you can't run the UNIX version of Ethereal.
>You'll have to use Tethereal.
= = = = = = = = = = = = = = = = = = = =
Best regards.
MaFai
zh-ma@xxxxxxxxxxx
2003-10-30
