Wireshark-bugs: [Wireshark-bugs] [Bug 2368] New: Wireshark decodes all G.711 packets as T. 38 af
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Tue, 18 Mar 2008 18:26:52 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2368

           Summary: Wireshark decodes all G.711 packets as T.38 after a SIP
                    reinvite for T.38.
           Product: Wireshark
           Version: 0.99.8
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Medium
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: hscohen@xxxxxxx


Build Information:
Version 0.99.8 (SVN Rev 24492)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, with libpcre 7.0, with SMI 0.4.5, with ADNS, with Lua 5.1,
with
GnuTLS 1.6.1, with Gcrypt 1.2.3, with MIT Kerberos, with PortAudio V19-devel,
with AirPcap.

Running on Windows XP Service Pack 2, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804
--
A VoIP call is set up with G.729 audio.
The answerer detects fax and reinvites G.711. The call changes to G.711 audio.
The caller detects fax and reinvites T.38 (packet 6957). The answerer sends
"488 Not Acceptable Here" and the call continues in G.711 audio.
However, starting immediately after the T.38 reinvite, Wireshark decodes all
G.711 packets as T.38 (starting with packet 6961).
The only way to make Wireshark decode these G.711 packet correctly is to write
the capture without the T.38 reinvite.


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.