Display Filter Reference: Real-Time Transport Protocol

Protocol field name: rtp

Versions: 1.0.0 to 2.6.1

Back to Display Filter Reference

Field name Description Type Versions
rtp.block-length Block length Unsigned integer, 2 bytes 1.0.0 to 2.6.1
rtp.cc Contributing source identifiers count Unsigned integer, 1 byte 1.0.0 to 2.6.1
rtp.csrc.item CSRC item Unsigned integer, 4 bytes 1.0.0 to 2.6.1
rtp.csrc.items Contributing Source identifiers Label 1.0.0 to 2.6.1
rtp.ext Extension Boolean 1.0.0 to 2.6.1
rtp.ext.ed137 ED137 extension Label 1.10.0 to 2.6.1
rtp.ext.ed137.ft.bss-nu Not used Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ft.bss.qidx BSS Quality Index Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ft.bss.qidx-ml BSS Quality Index Method Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ft.len Feature length Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ft.type Feature type Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ft.value Feature value Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ptt_id PTT-id Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.ptt_type PTT Type Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.sct Simultaneous Call Transmissions Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.squ SQU Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.vf VF Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.x X Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137.x-nu Not used Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A ED137A extension Label 1.10.0 to 2.6.1
rtp.ext.ed137A.ft.len Feature length Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.ft.sqi.qidx SQI Quality Index Unsigned integer, 4 bytes 1.12.0 to 2.6.1
rtp.ext.ed137A.ft.sqi.qidx-ml SQI Quality Index Method Unsigned integer, 4 bytes 1.12.0 to 2.6.1
rtp.ext.ed137A.ft.type Feature type Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.ft.value Feature value Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.pm PTT Mute Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.ptt_id PTT-id Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.ptt_type PTT Type Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.ptts PTT Summation Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.reserved Reserved Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137a.sct Simultaneous Call Transmissions Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.squ SQU Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.x X Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137A.x-nu Not used Unsigned integer, 4 bytes 1.10.0 to 2.6.1
rtp.ext.ed137s ED137 extensions Label 1.10.0 to 2.6.1
rtp.ext.len Extension length Unsigned integer, 2 bytes 1.0.0 to 2.6.1
rtp.ext.profile Defined by profile Unsigned integer, 2 bytes 1.0.0 to 2.6.1
rtp.ext.rfc5285.appbits Application Bits Unsigned integer, 1 byte 1.10.0 to 2.6.1
rtp.ext.rfc5285.data Extension Data Sequence of bytes 1.10.0 to 2.6.1
rtp.ext.rfc5285.id Identifier Unsigned integer, 1 byte 1.10.0 to 2.6.1
rtp.ext.rfc5285.len Length Unsigned integer, 1 byte 1.10.0 to 2.6.1
rtp.extseq Extended sequence number Unsigned integer, 4 bytes 1.0.0 to 2.6.1
rtp.follow Follow Boolean 1.0.0 to 2.6.1
rtp.fragment RTP Fragment data Frame number 1.0.0 to 2.6.1
rtp.fragment.count Fragment count Unsigned integer, 4 bytes 1.6.0 to 2.6.1
rtp.fragment.error Defragmentation error Frame number 1.0.0 to 2.6.1
rtp.fragment.multipletails Multiple tail fragments found Boolean 1.0.0 to 2.6.1
rtp.fragment.overlap Fragment overlap Boolean 1.0.0 to 2.6.1
rtp.fragment.overlap.conflict Conflicting data in fragment overlap Boolean 1.0.0 to 2.6.1
rtp.fragment.toolongfragment Fragment too long Boolean 1.0.0 to 2.6.1
rtp.fragment_unfinished RTP fragment, unfinished Label 2.0.0 to 2.6.1
rtp.fragments RTP Fragments Label 1.0.0 to 2.6.1
rtp.hdr_ext Header extension Unsigned integer, 4 bytes 1.0.0 to 2.6.1
rtp.hdr_exts Header extensions Label 1.0.0 to 2.6.1
rtp.marker Marker Boolean 1.0.0 to 2.6.1
rtp.p_type Payload type Unsigned integer, 1 byte 1.0.0 to 2.6.1
rtp.padding Padding Boolean 1.0.0 to 2.6.1
rtp.padding.count Padding count Unsigned integer, 1 byte 1.0.0 to 2.6.1
rtp.padding.data Padding data Sequence of bytes 1.0.0 to 2.6.1
rtp.padding_missing Frame has padding, but not all the frame data was captured Label 2.0.0 to 2.6.1
rtp.payload Payload Sequence of bytes 1.0.0 to 2.6.1
rtp.reassembled.length Reassembled RTP length Unsigned integer, 4 bytes 1.4.0 to 2.6.1
rtp.reassembled_in RTP fragment, reassembled in frame Frame number 1.0.0 to 2.6.1
rtp.rfc4571.len RFC 4571 packet len Unsigned integer, 2 bytes 2.4.0 to 2.6.1
rtp.seq Sequence number Unsigned integer, 2 bytes 1.0.0 to 2.6.1
rtp.setup Stream setup Character string 1.0.0 to 2.6.1
rtp.setup-frame Setup frame Frame number 1.0.0 to 2.6.1
rtp.setup-method Setup Method Character string 1.0.0 to 2.6.1
rtp.ssrc Synchronization Source identifier Unsigned integer, 4 bytes 1.0.0 to 2.6.1
rtp.timestamp Timestamp Unsigned integer, 4 bytes 1.0.0 to 2.6.1
rtp.timestamp-offset Timestamp offset Unsigned integer, 2 bytes 1.0.0 to 2.6.1
rtp.version Version Unsigned integer, 1 byte 1.0.0 to 2.6.1
srtp.auth_tag SRTP Auth Tag Sequence of bytes 1.0.0 to 2.6.1
srtp.enc_payload SRTP Encrypted Payload Sequence of bytes 1.0.0 to 2.6.1
srtp.mki SRTP MKI Sequence of bytes 1.0.0 to 2.6.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More