From the course: Analyzing VoIP Traffic with Wireshark

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

Evaluating H.323

Evaluating H.323

- [Instructor] H.323 acts as a wrapper for media control and includes H.225 and H.245, which are both protocols that have a specific role in the call setup process. In this segment, we'll focus on H.245 which establishes the properties of the call. H.323 begins with Q.931, which establishes a connection between hosts. We then move into H.245, which establishes properties such as audio codex and logical channels for the media transfer. Then once the call is set up, the properties can begin exchanging data using RTP. Let's see how this works in Wireshark. For this example, we'll use the RTP example file. To start, we want to filter only H.245 traffic. So go to the display filter and type H.245 and press Enter. Now within the frames, I want you to take note that this process uses TCP as we see here. So to view the transaction, we'll go to Statistics and then Flow Graph. And then once there we'll select Limit to display…

Contents