One other thing, when you filter from VoIP calls it cannot always find any
RTP packets. In that case what I do is find one in the “Flow” diagram &
click on it. That will cause the main decode to jump to that packet. Then go
into the RTP header & use the setup frame method.
Keith.
Sent: Friday, August 19, 2011 9:16 PM
Subject: Re: [Wireshark-users] Displaying RTP for VoIP
calls
Thank you. That
worked!
One way
is to open up the RTP header & find the “Setup Frame” which is under the
“stream set up by XXX” depending on your call setup protocol. Then right click
on it, Prepare a filter > Or selected. Another way is to use the SSID
(Synchronisation Source Identifier) field in the RTP header, prepare a filter as
before. However, doing this on one packet will probably only give you one
direction, you will most likely have to repeat this on the other RTP packet, to
get the complete call.
Sent:
Friday, August 19, 2011 6:57 PM
Subject:
[Wireshark-users] Displaying RTP for VoIP calls
___________________________________________________________________________ Sent
via: Wireshark-users mailing list
<wireshark-users@xxxxxxxxxxxxx> Archives:
http://www.wireshark.org/lists/wireshark-users Unsubscribe:
https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
|
