Wireshark mailing list archives

Re: Displaying RTP for VoIP calls


From: Ira Tessler <ira () connectmevoice com>
Date: Fri, 19 Aug 2011 16:16:30 -0400

Thank you. That worked!



Ira Tessler

ConnectMe



*From:* wireshark-users-bounces () wireshark org [mailto:
wireshark-users-bounces () wireshark org] *On Behalf Of *Keith French
*Sent:* Friday, August 19, 2011 2:29 PM
*To:* Community support list for Wireshark
*Subject:* Re: [Wireshark-users] Displaying RTP for VoIP calls



Ira,



One way is to open up the RTP header & find the “Setup Frame” which is under
the “stream set up by XXX” depending on your call setup protocol. Then right
click on it, Prepare a filter > Or selected. Another way is to use the SSID
(Synchronisation Source Identifier) field in the RTP header, prepare a
filter as before. However, doing this on one packet will probably only give
you one direction, you will most likely have to repeat this on the other RTP
packet, to get the complete call.



Keith French.



*From:* Ira Tessler <ira () connectmevoice com>

*Sent:* Friday, August 19, 2011 6:57 PM

*To:* wireshark-users () wireshark org

*Subject:* [Wireshark-users] Displaying RTP for VoIP calls



I am trying to trouble shoot VoIP calls using Wireshark 1.6.0. I have many
calls in one pcap file. I can display all the VoIP calls in the file by
going to Telephony->Voip Calls. I can select a call, listen to the RTP
stream. When I click on “Prepare Filter” and apply the filter, the resulting
display only shows two RTP packs. How can I see all the RTP packs related to
the selected VoIP calls?



Ira Tessler

ConnectMe


------------------------------

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request () wireshark org?subject=unsubscribe<wireshark-users-request () wireshark 
org?subject=unsubscribe>
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: