Display Filter Reference: Real-Time Transport Protocol
Protocol field name: rtp
Versions: 1.0.0 to 3.0.0
Back to Display Filter Reference
| Field name | Description | Type | Versions |
|---|---|---|---|
| rtp.block-length | Block length | Unsigned integer, 2 bytes | 1.0.0 to 3.0.0 |
| rtp.cc | Contributing source identifiers count | Unsigned integer, 1 byte | 1.0.0 to 3.0.0 |
| rtp.csrc.item | CSRC item | Unsigned integer, 4 bytes | 1.0.0 to 3.0.0 |
| rtp.csrc.items | Contributing Source identifiers | Label | 1.0.0 to 3.0.0 |
| rtp.ext | Extension | Boolean | 1.0.0 to 3.0.0 |
| rtp.ext.ed137 | ED137 extension | Label | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.bss-nu | Not used | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.bss.qidx | BSS Quality Index | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.bss.qidx-ml | BSS Quality Index Method | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.len | Feature length | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.type | Feature type | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ft.value | Feature value | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ptt_id | PTT-id | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.ptt_type | PTT Type | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.sct | Simultaneous Call Transmissions | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.squ | SQU | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.vf | VF | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.x | X | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137.x-nu | Not used | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A | ED137A extension | Label | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ft.len | Feature length | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ft.sqi.qidx | SQI Quality Index | Unsigned integer, 4 bytes | 1.12.0 to 2.6.7 |
| rtp.ext.ed137A.ft.sqi.qidx-ml | SQI Quality Index Method | Unsigned integer, 4 bytes | 1.12.0 to 2.6.7 |
| rtp.ext.ed137A.ft.type | Feature type | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ft.value | Feature value | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.pm | PTT Mute | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ptt_id | PTT-id | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ptt_type | PTT Type | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.ptts | PTT Summation | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.reserved | Reserved | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137a.sct | Simultaneous Call Transmissions | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.squ | SQU | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.x | X | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137A.x-nu | Not used | Unsigned integer, 4 bytes | 1.10.0 to 2.6.7 |
| rtp.ext.ed137s | ED137 extensions | Label | 1.10.0 to 2.6.7 |
| rtp.ext.len | Extension length | Unsigned integer, 2 bytes | 1.0.0 to 3.0.0 |
| rtp.ext.profile | Defined by profile | Unsigned integer, 2 bytes | 1.0.0 to 3.0.0 |
| rtp.ext.rfc5285.appbits | Application Bits | Unsigned integer, 1 byte | 1.10.0 to 3.0.0 |
| rtp.ext.rfc5285.data | Extension Data | Sequence of bytes | 1.10.0 to 3.0.0 |
| rtp.ext.rfc5285.id | Identifier | Unsigned integer, 1 byte | 1.10.0 to 3.0.0 |
| rtp.ext.rfc5285.len | Length | Unsigned integer, 1 byte | 1.10.0 to 3.0.0 |
| rtp.extseq | Extended sequence number | Unsigned integer, 4 bytes | 1.0.0 to 3.0.0 |
| rtp.follow | Follow | Boolean | 1.0.0 to 3.0.0 |
| rtp.fragment | RTP Fragment data | Frame number | 1.0.0 to 3.0.0 |
| rtp.fragment.count | Fragment count | Unsigned integer, 4 bytes | 1.6.0 to 3.0.0 |
| rtp.fragment.error | Defragmentation error | Frame number | 1.0.0 to 3.0.0 |
| rtp.fragment.multipletails | Multiple tail fragments found | Boolean | 1.0.0 to 3.0.0 |
| rtp.fragment.overlap | Fragment overlap | Boolean | 1.0.0 to 3.0.0 |
| rtp.fragment.overlap.conflict | Conflicting data in fragment overlap | Boolean | 1.0.0 to 3.0.0 |
| rtp.fragment.toolongfragment | Fragment too long | Boolean | 1.0.0 to 3.0.0 |
| rtp.fragment_unfinished | RTP fragment, unfinished | Label | 2.0.0 to 3.0.0 |
| rtp.fragments | RTP Fragments | Label | 1.0.0 to 3.0.0 |
| rtp.hdr_ext | Header extension | Unsigned integer, 4 bytes | 1.0.0 to 3.0.0 |
| rtp.hdr_exts | Header extensions | Label | 1.0.0 to 3.0.0 |
| rtp.marker | Marker | Boolean | 1.0.0 to 3.0.0 |
| rtp.p_type | Payload type | Unsigned integer, 1 byte | 1.0.0 to 3.0.0 |
| rtp.padding | Padding | Boolean | 1.0.0 to 3.0.0 |
| rtp.padding.count | Padding count | Unsigned integer, 1 byte | 1.0.0 to 3.0.0 |
| rtp.padding.data | Padding data | Sequence of bytes | 1.0.0 to 3.0.0 |
| rtp.padding_missing | Frame has padding, but not all the frame data was captured | Label | 2.0.0 to 3.0.0 |
| rtp.payload | Payload | Sequence of bytes | 1.0.0 to 3.0.0 |
| rtp.reassembled.length | Reassembled RTP length | Unsigned integer, 4 bytes | 1.4.0 to 3.0.0 |
| rtp.reassembled_in | RTP fragment, reassembled in frame | Frame number | 1.0.0 to 3.0.0 |
| rtp.rfc4571.len | RFC 4571 packet len | Unsigned integer, 2 bytes | 2.4.0 to 3.0.0 |
| rtp.seq | Sequence number | Unsigned integer, 2 bytes | 1.0.0 to 3.0.0 |
| rtp.setup | Stream setup | Character string | 1.0.0 to 3.0.0 |
| rtp.setup-frame | Setup frame | Frame number | 1.0.0 to 3.0.0 |
| rtp.setup-method | Setup Method | Character string | 1.0.0 to 3.0.0 |
| rtp.ssrc | Synchronization Source identifier | Unsigned integer, 4 bytes | 1.0.0 to 3.0.0 |
| rtp.timestamp | Timestamp | Unsigned integer, 4 bytes | 1.0.0 to 3.0.0 |
| rtp.timestamp-offset | Timestamp offset | Unsigned integer, 2 bytes | 1.0.0 to 3.0.0 |
| rtp.version | Version | Unsigned integer, 1 byte | 1.0.0 to 3.0.0 |
| srtp.auth_tag | SRTP Auth Tag | Sequence of bytes | 1.0.0 to 3.0.0 |
| srtp.enc_payload | SRTP Encrypted Payload | Sequence of bytes | 1.0.0 to 3.0.0 |
| srtp.mki | SRTP MKI | Sequence of bytes | 1.0.0 to 3.0.0 |
Go Beyond with Riverbed Technology
I have a lot of traffic...
ANSWER: SteelCentral™ Packet Analyzer PE
- • Visually rich, powerful LAN analyzer
- • Quickly access very large pcap files
- • Professional, customizable reports
- • Advanced triggers and alerts
No, really, I have a LOT of traffic…
ANSWER: SteelCentral™ AppResponse 11
- • Full stack analysis – from packets to pages
- • Rich performance metrics & pre-defined insights for fast problem identification/resolution
- • Modular, flexible solution for deeply-analyzing network & application performance