Hi, I am trying 0.9.2 now with my plugin and I think there's something wrong with the TCP defragmentation code. Whether I enable or disable Q.931 desegmentation, it makes no difference (pinfo->can_desegment == 0) I'll add the necessary heuristics to see if it is a H.225 on Q.931 on TPKT on TCP without the TPKT. -- Andreas Sikkema andreas.sikkema@xxxxxxxxxxx "While you're waiting, read the free novel we sent you. It's a Spanish story about a guy named `Manual'" - Dilbert
Powered by MHonArc 2.6.10