Wireshark · Ethereal-dev: Re: [Ethereal-dev] RTP miss rigister it's port

[Guy Harris <guy@xxxxxxxxxxxx>]

On Monday, August 18, 2003, at 11:31 PM, li wrote:

> in packet-rtp.c , proto_reg_handoff_rtp() don't register it's port 
> (49598),

That's *not* its port.  RTP doesn't have a particular port assigned to 
it; it uses whatever port it happens to pick up, and another protocol, 
such as RTSP or SIP or various H.323 protocols, are used to tell the 
other machine what port is to be used for RTP.

If the other protocol is one where Ethereal dissects enough of it to 
set up a conversation for RTP, *and* if you have the setup packets in 
your capture, RTP will be recognized, otherwise it won't.

As Andreas Sikkema said, use the "Decode As" mechanism to decode 
traffic as RTP if Ethereal doesn't figure out that the traffic is RTP.