Wireshark · Wireshark-users: [Wireshark-users] tshark RTP decodes

[Barry Constantine <Barry.Constantine@xxxxxxxx>]

Hi,

 

I know how to redecode to RTP in UI, but would like to the same at command line and extract fields.

 

I amtrying this:

 

tshark -r rtp_call.pcap -o rtp.heuristic_rtp:TRUE -T fields -e rtp.seq

 

It accepts the -o option, but the rtp.seq field is displayed with no content.

 

Any suggestions?

 

Thanks,

Barry