Wireshark-users: [Wireshark-users] Help on Ethernet Size
From: "ARAMBULO, Norman R." <NRARAMBULO@xxxxxxxxxxx>
Date: Thu, 8 Mar 2007 10:07:30 +0800
Well I guess your right anders, well il try to filter via port to check the h323 voip calls, ihave filtered a couple of h323 calls,
my problem is some protocol analyzer shows a lot of h323 voip call but when i tried to filter it out using wireshark it only
show few calls. Ill try to put some sample files for guys out there who could help me. Thanks
 
Wireshark-users: Re: [Wireshark-users] Help on Ethernet Size
From: "Anders Broman \(AL/EAB\)" <anders.broman@xxxxxxxxxxxx>
Date: Wed, 7 Mar 2007 11:08:18 +0100

Hi,
I think the H323 dissection is based on the ports used and may not work well if other than
the standard ports are used, a small sample trace from your network may show what the problem is.
 
I'm not sure what you mean by the second question.
Best regards
Anders
 



 "Reality is merely an illusion, albeit a very persistent one."

                                                                                                                -- Albert Einstein