RE: Unrecognised packets

cw,

i think the frame 5 was just misinterpreted by ethereal (probably it
found some initial byte sequence that made it consider the frame this
way). if you go through the decode you'll find out that the data
contained in the (claimed) 'q.931' part is something really far from
q.931 - most of the elements are unknown, with some weird data.

just a wrong decoding teplate applied, possibly one that'd be used for
decoding h.225 frames (but h.225 runs on different tcp port than 1199)

hope this helps

deejay