Wireshark · Wireshark-users: Re: [Wireshark-users] Requesting command to decode UDP packet to RTP

[Jaap Keuter <jaap.keuter@xxxxxxxxx>]

Hi,

Have a look in your configuration file heuristic_protos. There's this entry:
rtp_udp,1
If it says '0' instead change it to '1'.
You can do this via the GUI, go to menu Analyze|Enabled Protocols...
Then search for RTP, and enable rtp_udp. Then leave the GUI and try tshark again
from the command line. It uses the same configuration files, so it should be
fine now.

Thanks,
Jaap


On 06-04-17 19:21, mahadevaswamy.h.n Swamy wrote:
> Hi,
> 
> I am having a .pcap file which is having UDP packets. From which I want to
> decode as a RTP. I can do by using GUI but I want the same in command line.
> Could you please provide me the command line to do the same.
> 
> I tried below command but it is throwing error as "tshark: illegal option -- 2"
> 
> tshark -r filename.pcap -2R rtp -E header=y -E separator=, -T fields -e
> frame.number -e rtp.version > C:\Desktop\test.csv
> 
> 
> 
> If you want more info please revert to me.
> 
> Thanks in advance
> 
> Br,
> 
> Mahadevaswamy.HN
> 
> 
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>