ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] VOIP dissector + re-assembly

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Bruce Fitzsimons <Bruce@xxxxxxxxxxxxxx>
Date: Mon, 30 Aug 2004 17:39:13 +1200
snotball wrote:

Hi all,

Has anyone developed or is anyone devloping a dissector for ethereal to decode VOIP traffic? A plugin would be good with some form of re-assembly feature to playback the audio.

SIP, H.323 and MGCP Megaco dissectors exist. These are the control protocols for VoIP. You'd want these so you can identify the voice streams you want to decode.

RTP G.711a/u-law dissectors exist. This is basically standard uncompressed voice, which is used extensively but not exclusively.

G.729a/b, G.723.1, and various other codecs used by VoIP do not have dissectors. These codecs are encumbered by patents and encoding/decoding code cannot be freely distributed.

I'm not sure if there are dissectors for GSM, iLBC, or any other more-or-less-free codecs.

/Bruce