Wireshark · Wireshark-users: Re: [Wireshark-users] Displaying RTP for VoIP calls

["Keith French" <keithfrench@xxxxxxxxxxxxx>]

Ira,

 

One way is to open up the RTP header & find the “Setup Frame” which is under the “stream set up by XXX” depending on your call setup protocol. Then right click on it, Prepare a filter > Or selected. Another way is to use the SSID (Synchronisation Source Identifier) field in the RTP header, prepare a filter as before. However, doing this on one packet will probably only give you one direction, you will most likely have to repeat this on the other RTP packet, to get the complete call.

 

Keith French.

 

From: Ira Tessler

Sent: Friday, August 19, 2011 6:57 PM

To: wireshark-users@xxxxxxxxxxxxx

Subject: [Wireshark-users] Displaying RTP for VoIP calls

 

I am trying to trouble shoot VoIP calls using Wireshark 1.6.0. I have many calls in one pcap file. I can display all the VoIP calls in the file by going to Telephony->Voip Calls. I can select a call, listen to the RTP stream. When I click on “Prepare Filter” and apply the filter, the resulting display only shows two RTP packs. How can I see all the RTP packs related to the selected VoIP calls?

 

Ira Tessler

ConnectMe

 

---

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe