Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 3148] New: No frame type index filter for AMR if sent usin

Date: Fri, 19 Dec 2008 06:26:25 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3148

           Summary: No frame type index filter for AMR if sent using
                    bandwidth efficient mode
           Product: Wireshark
           Version: 1.0.5
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: andreas.bystrom@xxxxxxxxxxxx


Created an attachment (id=2586)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=2586)
capture of AMR rtp packets, type of index=2

Build Information:
Version 1.0.5 (SVN Rev 26954)

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.12.8, with GLib 2.14.6, with WinPcap (version unknown),
with libz 1.2.3, without POSIX capabilities, with libpcre 7.0, with SMI 0.4.8,
with ADNS, with Lua 5.1, with GnuTLS 2.3.8, with Gcrypt 1.4.1, with MIT
Kerberos, with PortAudio V19-devel, with AirPcap.

Running on Windows XP Service Pack 3, build 2600, with WinPcap version 4.0.2
(packet.dll version 4.0.0.1040), based on libpcap version 0.9.5, without
AirPcap.

Built using Microsoft Visual C++ 6.0 build 8804

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.
--
There seems to be lacking a filter function for AMR rtp packets that are
encoded in AMR bandwidth efficient.
I tried using the following filter on the trace attached (which have AMR-NB rtp
type of index=2 packets) but the result was empty
amr.nb.toc.ft == 2

Please see attached trace. To be able to encode the packets correctly I had to
do the following:
Edit->Preferences->Protocol->AMR->”Type of AMR encoding of the payload =
RFC3267 BW-efficient”

Regards,
// Andreas


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.