Wireshark mailing list archives

Re: Cannot see RTP packets on end


From: capricorn 80 <cool_capricorn80 () hotmail com>
Date: Mon, 5 Apr 2010 21:43:27 +0000


 

Hi !

 

Thanks for the information. I read this before that RTP run on top of UDP and I can use the decode option. But the 
problem is that what If i am not sure about that which UDP packet is RTP. 

 

I have the .pcap file with me right now. 

 

Why my wireshark can recognise the RTP out of same traffic and not his. Can I do some settings on his end other than 
decode as ?

 

Regards,

 


 


Date: Tue, 6 Apr 2010 07:16:28 +1000
From: martinvisser99 () gmail com
To: wireshark-users () wireshark org
Subject: Re: [Wireshark-users] Cannot see RTP packets on end


The problem will be that your friends capture probably has not seen the the related SIP or RTSP control packets 
associated with the conversation. RTP runs on top of UDP, but is doesn't use a fixed or well known port, so it is 
difficult for Wireshark to always determine whether particular UDP packets are UDP. If you right-click on a UDP packet 
that you think is RTP and use "Decode As..." to select RTP, you should get the result you are after. Regards, Martin

MartinVisser99 () gmail com



On Tue, Apr 6, 2010 at 6:41 AM, capricorn 80 <cool_capricorn80 () hotmail com> wrote:


 
 Hi!
 
  I am running a test using wireshark running on two laptops located on different location of the world. 
 
  The wireshark running on my laptop can capture the RTP traffic but wireshark running on my friends laptop cannot 
capture the RTP traffic and only UDP. 
 
  This is quite strange. Why wireshark dont capture the RTP packets on my friends laptop?
 
 
 My laptop (sweden)--------------- Asterisk Server (sweden) -------------------- My friend laptop (United Kingdom)
 
 
Regards,

 
  



Hotmail: Powerful Free email with security by Microsoft. Get it now.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

                                          
_________________________________________________________________
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=60969
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: