Wireshark mailing list archives

One IP-Port pair missing in the pcap file


From: vishal borkar <weeshalll () gmail com>
Date: Wed, 24 Mar 2010 10:57:59 +0530

Hello all,
I recently captured a yahoo voice communication between my machine and a
friend.
What i observed was that when i opened the file in a text editor i could not
find the
port and the IP of my system on which the actual communication took place.
FYI my ip ( on which the UDP data travelled ):-192.168.0.230
Port(on which the UDP data travelled ):- 22308

Though i can clearly see the communication happening on this IP-port pair
when i opened the file in Wireshark.
Can anyone tell me as to why this is happening ?
What i mean is aren't the SIP packets supposed to carry this information ?
Since they are not carrying this information then how is the communication
taking place ?
I am attaching the file for your reference.

Thanks in advance,
Vishal

Attachment: snort.log.2
Description:

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: