Wireshark mailing list archives

Re: Saving a VOIP conversation


From: Bernd Heidner <bernd.heidner () googlemail com>
Date: Sun, 7 Nov 2010 19:35:39 +0100

Hi,

you can use wireshark to play the audio, transported by rtp.  This
will work only for the codec G711!

Select Telephony->VoipCalls in the wireshark GUI.
A window with the VoIP calls will open.

Select your VoIP Call and press Player followed by Decode. Check both
streams and press Play. Now you can here the transported audio.

You can test it with the file SIP_CALL_RTP_G711 from the wireshark wiki.
See: http://wiki.wireshark.org/SampleCaptures#SIP_and_RTP

When exporting and decoding the payload to a file you will have also
the limitation to the codec G711.

Bernd



On 7 November 2010 18:57,  <mark-wade () comcast net> wrote:
Hello,



I am trying to save off VOIP conversations with no success.  I am running
wireshark on a Windows system.  I can isolate the call or VOIP session, then
even get both of the call sessions.  When I select one of the RTP packets
and then select RTP Stream analysis and get BOTH sessions when I select save
payload I then get the option to choose format, .raw or .au and then choose
direction (both).  When I save out the payload its very inconsistent and
then I can't listen to it on a Windows system.  Is there another step or
something that I am missing?  Do I need to convert every .au file to a .wmv
or .wav?  Is it easier to work with .raw files than .au on Windows.  I have
linux box but at the end of the day the person listening to the output needs
to have format that could be listen to on a Windows system.



thanks,





___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: