Wireshark · Wireshark-users: Re: [Wireshark-users] Jitter wrong in wireshark?

[Lars Ruoff <lars.ruoff@xxxxxxxxxxxxxxxxx>]

Hi Anders,
since this too is a recurring question, perhaps you (or someone else) could add it to the Wiki, just under what i added last week: http://wiki.wireshark.org/RTP_statistics (bottom).
(I'm sorry, i don't have the time right now).

br,
Lars


Anders Broman wrote:
> Hi,
> Looking at the sources there is code there to use different frequencies
> But for dynamic payload types there are two prerequisites that must be met:
> - The setup signalling must be in the traces for Wireshark to track the
> PT to the media type.
> - The media type sampling frequency must be in the table of rtp_analysis.c
>
> This types are currently specified:
> static const mimetype_and_clock mimetype_and_clock_map[] = {
> 	{"AMR",		8000},  /* [RFC3267] */
> 	{"AMR-WB",	16000},  /* [RFC3267] */
> 	{"EVRC",	8000},  /* [RFC3558] */
> 	{"EVRC0",	8000},  /* [RFC3558] */
> 	{"G7221",	16000},  /* [RFC3047] */
> 	{"G726-16",	8000},  /* [RFC3551] */
> 	{"G726-24",	8000},  /* [RFC3551] */
> 	{"G726-32",	8000},  /* [RFC3551] */
> 	{"G726-40",	8000},  /* [RFC3551] */
> 	{"G729D",	8000},  /* [RFC3551] */
> 	{"G729E",	8000},  /* [RFC3551] */
> 	{"GSM-EFR",	8000},  /* [RFC3551] */
> 	{"mpa-robust",	90000},  /* [RFC3119] */
> 	{"SMV",		8000},  /* [RFC3558] */
> 	{"SMV0",	8000},  /* [RFC3558] */
> 	{"red",		1000},  /* [RFC4102] */
> 	{"t140",		1000},  /* [RFC4103] */
> 	{"BMPEG",	90000},  /* [RFC2343],[RFC3555] */
> 	{"BT656",	90000},  /* [RFC2431],[RFC3555] */
> 	{"DV",		90000},  /* [RFC3189] */
> 	{"H263-1998",	90000},  /* [RFC2429],[RFC3555] */
> 	{"H263-2000",	90000},  /* [RFC2429],[RFC3555] */
> 	{"MP1S",	90000},  /* [RFC2250],[RFC3555] */
> 	{"MP2P",	90000},  /* [RFC2250],[RFC3555] */
> 	{"MP4V-ES",	90000},  /* [RFC3016] */
> 	{"pointer",	90000},  /* [RFC2862] */
> 	{"raw",		90000},  /* [RFC4175] */
> };
> Best regards
> Anders
>
>
>
> -----Ursprungligt meddelande-----
> Från: wireshark-users-bounces@xxxxxxxxxxxxx
> [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] För Juan.Wortley@xxxxxxxxx
> Skickat: den 24 februari 2007 17:45
> Till: wireshark-users@xxxxxxxxxxxxx
> Ämne: Re: [Wireshark-users] Jitter wrong in wireshark?
>
> Hi Anders,
>
> Yes, your are right. Codecs affect jitter calculation because of the
> sampling frequency. In practice, it affects when calculating the timestamp
> to seconds. I.e: when multipling timestamp ticks to convert to seconds one
> must use the frequency sampling of the current codec. As wireshark uses
> always 0.000125 (it looks like this is not configurable), then if codec is
> not G711 calculations will be wrong. 
>
> And that´s my case :(
> BR
> Juan
>
>
>
>
>
>
> > -----Original Message-----
> > From: wireshark-users-bounces@xxxxxxxxxxxxx 
> > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of 
> > ext Anders Broman
> > Sent: Sábado, 24 de Febrero de 2007 04:50 a.m.
> > To: 'Community support list for Wireshark'
> > Subject: Re: [Wireshark-users] Jitter wrong in wireshark?
> >
> > Hi,
> > If I understood the previous discussion correctly the RTP 
> > timestamp which is based on the sampling frequency is used in 
> > the calculations. If the wrong sampling frequency is used the 
> > calculations will be off.
> >
> > If a dynamic PT is used (>95) it probably not G711.
> > Best regards
> > Anders
> >
> > ________________________________________
> > Från: wireshark-users-bounces@xxxxxxxxxxxxx
> > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] För 
> > Juan.Wortley@xxxxxxxxx
> > Skickat: den 23 februari 2007 18:29
> > Till: wireshark-users@xxxxxxxxxxxxx
> > Ämne: Re: [Wireshark-users] Jitter wrong in wireshark?
> >
> > Hi Anders,
> > good question. I´m not sure but I guess is codec is PCMA G711 
> > 8KHz (will take a look during call setup in a couple of hours).
> >  
> > However "Payload type" is 97 (0x61), and wireshark shows it as 
> > "Payload type=Unknown"
> >  
> > According to the formula, jitter calculation depends on 
> > timestamps and arrival time differences. I don´t know how 
> > codec could affect.
> >  
> > BR
> > Juan
> >  
> >
> > ________________________________________
> > From: wireshark-users-bounces@xxxxxxxxxxxxx
> > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of 
> > ext Anders Broman (AL/EAB)
> > Sent: Viernes, 23 de Febrero de 2007 01:05 p.m.
> > To: Community support list for Wireshark
> > Subject: SV: [Wireshark-users] Jitter wrong in wireshark?
> > Hi,
> > Which codec is used?
> > Best regards
> > Anders
> >
> > ________________________________________
> > Från: wireshark-users-bounces@xxxxxxxxxxxxx genom 
> > Juan.Wortley@xxxxxxxxx
> > Skickat: fr 2007-02-23 16:53
> > Till: wireshark-users@xxxxxxxxxxxxx
> > Ämne: [Wireshark-users] Jitter wrong in wireshark?
> > Hi All,
> > Below is a rtp analysis from a wireshark 0.99.5 capture in a 
> > live network. 
> > Doing by hand jitter calculation it doesn´t match. And of 
> > course, if below data is real it means we are having jitter of 
> > more than 1 minute !!
> > Exampe: first jitter should be 138.90/16 = 8.68125 [ms] and is showing
> > 8803,82 [ms] !!! 
> > Do someone know what could be wrong or what I´m missing? 
> > BR
> > Juan 
> >
> > Forward Packet  Sequence        Delta (ms)      Jitter (ms)    
> > IP BW (kbps) Marker  Status  Date    Length
> > 1       0       0.00    0.00    1.45            [ Ok ]  02/19/2007
> > 18:44:25.915 231
> > 2       1       138.90  8803.82 2.90            [ Ok ]  02/19/2007
> > 18:44:26.053 231
> > 3       2       119.59  17058.61        4.34            [ Ok ] 
> > 02/19/2007
> > 18:44:26.173 231
> > 4       3       139.67  24796.21        5.79            [ Ok ] 
> > 02/19/2007
> > 18:44:26.313 231
> > 5       4       180.22  32047.69        7.24            [ Ok ] 
> > 02/19/2007
> > 18:44:26.493 231
> > 6       5       241.67  38842.10        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:26.735 231
> > 7       6       96.71   45220.93        10.14           [ Ok ] 
> > 02/19/2007
> > 18:44:26.831 231
> > 8       7       198.41  51194.72        10.14           [ Ok ] 
> > 02/19/2007 18:44:27.030 231
> > 9       8       205.78  56794.69        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:27.235 231
> > 10      9       193.62  62045.42        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:27.429 231
> > 11      10      197.77  66967.72        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:27.627 231
> > 12      11      208.31  71581.72        7.24            [ Ok ] 
> > 02/19/2007
> > 18:44:27.835 231
> > 13      12      190.92  75908.43        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.026 231
> > 14      13      199.23  79964.20        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.225 231
> > 15      14      183.31  83767.48        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.409 231
> > 16      15      200.50  87331.98        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.609 231
> > 17      16      216.07  90672.73        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.825 231
> > 18      17      137.81  93809.57        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:28.963 231
> > 19      18      139.08  96750.28        8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:29.102 231
> > 20      19      119.60  99508.41        10.14           [ Ok ] 
> > 02/19/2007
> > 18:44:29.222 231
> > 21      20      119.59  102094.16       10.14           [ Ok ] 
> > 02/19/2007
> > 18:44:29.341 231
> > 22      21      119.18  104518.33       10.14           [ Ok ] 
> > 02/19/2007 18:44:29.460 231
> > 23      22      126.80  106790.51       11.58           [ Ok ] 
> > 02/19/2007
> > 18:44:29.587 231
> > 24      23      112.05  108921.60       11.58           [ Ok ] 
> > 02/19/2007
> > 18:44:29.699 231
> > 25      24      145.14  110917.43       11.58           [ Ok ] 
> > 02/19/2007
> > 18:44:29.844 231
> > 26      25      115.57  112790.36       13.03           [ Ok ] 
> > 02/19/2007 18:44:29.960 231
> > 27      26      118.57  114546.05       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.079 231
> > 28      27      139.44  116190.71       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.218 231
> > 29      28      120.40  117733.77       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.338 231
> > 30      29      118.59  119180.49       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.457 231
> > 31      30      120.00  120536.71       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.577 231
> > 32      31      120.23  121808.15       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.697 231
> > 33      32      119.60  123000.17       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.817 231
> > 34      33      118.72  124117.74       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:30.936 231
> > 35      34      119.88  125165.39       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:31.055 231
> > 36      35      146.42  126145.90       13.03           [ Ok ] 
> > 02/19/2007
> > 18:44:31.202 231
> > 37      36      57.34   118265.37       11.90   SET     
> > Incorrect timestamp     02/19/2007 18:44:31.259 90     
> >                                                                        
> > Reverse Packet  Sequence        Delta (ms)      Jitter (ms)    
> > IP BW (kbps) Marker  Status  Date    Length
> > 44      1       0.00    0.00    1.45            [ Ok ]  02/19/2007
> > 18:44:36.119 231
> > 46      2       126.78  99992.08        2.90            [ Ok ] 
> > 02/19/2007
> > 18:44:36.246 231
> > 47      3       293.16  193724.25       4.34            [ Ok ] 
> > 02/19/2007
> > 18:44:36.539 231
> > 48      4       159.97  281606.49       5.79            [ Ok ] 
> > 02/19/2007
> > 18:44:36.699 231
> > 49      5       119.98  363998.58       7.24            [ Ok ] 
> > 02/19/2007
> > 18:44:36.819 231
> > 50      6       160.07  441238.67       8.69            [ Ok ] 
> > 02/19/2007
> > 18:44:36.979 231
> > 51      7       261.00  513644.94       8.69            [ Ok ] 
> > 02/19/2007 18:44:37.240 231
> > 52      8       43.09   481544.82       7.56    SET     
> > Incorrect timestamp     02/19/2007 18:44:37.283 90 
> > _______________________________________________
> > Wireshark-users mailing list
> > Wireshark-users@xxxxxxxxxxxxx
> > http://www.wireshark.org/mailman/listinfo/wireshark-users
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-users