Wireshark · Ethereal-users: RE: [Ethereal-users] Not seeing RTP or RTCP traffic on Win2K

["Joe Aiello" <Joe.Aiello@xxxxxxxxxxxx>]

I have a couple commercial LAN protocol Analyzers that do decode RTP
automatically, but they are not worth the price.  

I just wish I could export/save as to Sniffer WAN format so I can run my RTP
Payload extraction tool on Ethereal capture files :) and save a couple
steps.
(This editorial statement is not intended to solicit a response  :O  )

Joe Aiello
Systems Engineer
Sylantro Systems


 -----Original Message-----
From: 	Guy Harris [mailto:guy@xxxxxxxxxx] 
Sent:	Thursday, January 31, 2002 6:26 PM
To:	Joe Aiello
Cc:	greccoj@xxxxxxxxxxxxx; ethereal-users@xxxxxxxxxxxx
Subject:	Re: [Ethereal-users] Not seeing RTP or RTCP traffic on Win2K

> I capture RTP all the time.  You do have to locate the RTP stream,
highlight
> a packet, right click and decode AS and select RTP.

Yup.  There's an item in the FAQ about this:

	http://www.ethereal.com/faq.html#q4.13

> It might decode one
> half, so you might need to click a packet going the other direction and
> decode that too.  Same for the RTCP.

Make sure you select the correct port number - if the packet you've
selected is an RTP request, select "destination" after "UDP", and if the
packet you've selected is an RTP response, select "source" after "UDP" -
or just select "both".