Wireshark-users: Re: [Wireshark-users] Save RTP Stream for both sides Conversation
From: "Ryan \"Izzy\" Bales" <izzy84075@xxxxxxxxx>
Date: Thu, 1 Sep 2011 02:33:20 -0700
There might be a way to do this from within Wireshark itself, but the idea that comes to mind would be to take the two separate audio files, and import both into a single Audacity project(Or a similar program), and then you can line them up and export them as a single audio file.

I seem to recall having the same problem a while back, but I was mostly looking for other problems with my VoIP setup, so I paid it very little attention.

On Thu, Sep 1, 2011 at 02:14, firstname lastname <psykosonik_frequenz@xxxxxxxxx> wrote:
Hi,

I have a network capture file consisting of a conversation made using VoIP. However, when I go to telephony -> VoIP Calls, it doesn't detect any VoIP Calls. My guess is that since it didn't capture the call setup messages as well, so no VoIP Calls are detected.

So, in order to listen to the conversation, I decided to listen to the RTP Stream.

No frames were detected as RTP. There were many UDP frames. Assuming that RTP packets got detected as UDP.

I selected one UDP Packet among the huge array of many consecutive UDP packets. Right clicked on it, selected "Decode As RTP".

Now, these frames appeared as RTP in the network capture file.

Next, I wanted to save this RTP Conversation. I followed this approach:

Telephony -> RTP -> Show All Streams

It showed two streams.

Between Party A and Party B
Between Party B and Party A

each of these streams have only "one way conversation" saved in them.

To save the payload, I selected one stream, clicked on Analyze and in the new pop up window, clicked, on Save Payload (with raw and forward selected).

The format selected was .ul.

I used SoX to convert this to a wav format.

sox test.ul test.wav

Now when I play this media file using Windows Media Player, only one side conversation is played. Which means I can hear only Party A talking.

Next, I selected the second stream, between Party B and A, this time around, following the same steps as above to save the conversation. I was able to listen to Party B's conversation.

My question is, how do I save the streams in such a way that I can listen to the conversation of both the parties in the same file?

I tried selecting both the streams at once and followed the above approach. It by default saved the conversation only for the first source in the list.

Thanks.
Regards,
NeonFlash
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe