Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] RTP decoded as WCCP (malformed packet)

From: "Chet Seligman" <cseligman@xxxxxxxxxxxxx>
Date: Thu, 4 Jan 2007 19:04:23 -0800
Title: RTP decoded as WCCP (malformed packet)

When I tell WS

 to decode as RTP it does so correctly, displaying 214byte normal G.711 packets.

These can be turned into understandable audio.

Can anyone explain why the original protocol decode is WCCP with a very large packet length listed?