Media Gateway Control Protocol (MEGACO/H.248.1)
MEGACO is used to control a Media Gateway in a VoIP system. MEGACO can be Text or Binary (ASN.1) encoded.
- ["MTP3"]: MEGACO can use ["MTP3"] as its transport protocol; MEGACO is indicated in MTP3 by the service indicator 14.
- ["SCTP"]: Typically(?) MEGACO uses ["SCTP"] as its transport protocol; MEGACO is indicated in SCTP by a payload protocol ID of 7.
- ["TCP"]: MEGACO can use ["TCP"] as its transport protocol. The well known TCP port for MEGACO traffic is 2944; if TCP is used, a TPKT header must be included.
- ["UDP"]: MEGACO can use ["UDP"] as its transport protocol. The well known UDP port for MEGACO traffic is 2944
H.248 over SCTP [attachment:H.248decoded.gif decoded] by Ronnie Sahlbergs decoder in the 0.10.9-SVN-13213 build.
The MEGACO dissector works for TEXT encoding of the protocol if EOL is used as SEParator. Dissection of binary encoding has recently been added (2004-10-25) as a separate dissector, it now handles binary H248 ower M3UA and SCTP in case of SCTP "decode as" may have to be used as the TEXT encoding dissector may take precedence.
If TCP is used there may be issues with desegmentation; such traces would be valuable.
- You can change the ports on which MEGACO is dissected for UDP/TCP
- You can specify whether the raw text of MEGACO packets is to be displayed
- You can specify whether a detailed dissection of MEGACO packets is to be displayed
Example capture file
XXX - Add a simple example capture file to the SampleCaptures page and link from here. Keep it short, it's also a good idea to gzip it to make it even smaller, as Ethereal can open gzipped files automatically.
A complete list of MEGACO display filter fields can be found in the [http://www.ethereal.com/docs/dfref/MEGACO/MEGACO.html display filter reference]
Show only the MEGACO based traffic:
You cannot directly filter MEGACO protocols while capturing. However, if you know the ["TCP"] or ["SCTP"] port used (see above), you can filter on that one.
- add link to MEGACO specification and where to find additional info on the web about MEGACO
[http://www.ietf.org/rfc/rfc3015.txt?number=3015 RFC3015]: MEGACO version 1
[http://www.ietf.org/rfc/rfc3525.txt?number=3525 RFC3525]: MEGACO version 2
[http://www.iana.org/assignments/megaco-h248 IANA Megaco assignments]:
- ITU-T Rec. H.248.1