Wireshark-users: Re: [Wireshark-users] Requesting command to decode UDP packet to RTP
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 6 Apr 2017 13:01:05 -0700
On Apr 6, 2017, at 12:49 PM, Jaap Keuter <jaap.keuter@xxxxxxxxx> wrote:

> Have a look in your configuration file heuristic_protos. There's this entry:
> rtp_udp,1
> If it says '0' instead change it to '1'.
> You can do this via the GUI, go to menu Analyze|Enabled Protocols...
> Then search for RTP, and enable rtp_udp. Then leave the GUI and try tshark again
> from the command line. It uses the same configuration files, so it should be
> fine now.

Or try running tshark with the command-line option

	--enable-heuristic rtp_udp

which will enable it for that *particular* instance of tshark without making it a permanent setting.