Wireshark-users: Re: [Wireshark-users] Wireshark RTP Stream - Packet Lost in Neg value over the W
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Sat, 24 Sep 2011 20:57:13 +0200
Hi,
Your span is probably setup to capture ingress and egress traffic. That produces duplicates that throw of RTP stream analysis. Check the details of your RPT stream in the context of your capture setup. 

Thanks,
Jaap

On Sat, 24 Sep 2011 22:03:33 +0500, Farooq Razzaque wrote:


Dear All

Can u have a look at the attached screen shot of wireshark. In LOST
COLUMN it is showing 300% , -299.7% pack lost.

Do u have any idea that are these packet loss is normal/abnormal.
IP phones ( 172.20.24.x) are located in one branch and Recording machine 
(172.20.19.17) is located in other branch.

SPANing is happing over the WAN via L2TPV3.

IP Phones : 172.20.24.X (IP Phone)

172.20.19.17 (Recording machine)