Wireshark-dev: Re: [Wireshark-dev] decoding multiple packets to a protocol
From: "RUOFF, LARS (LARS)** CTR **" <[email protected]>
Date: Fri, 17 Dec 2010 17:24:19 +0100

Damn, Jaap beat me again…

 


From: [email protected] [mailto:[email protected]] On Behalf Of Jaap Keuter
Sent: vendredi 17 décembre 2010 17:19
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] decoding multiple packets to a protocol

 

Hi,

Go to preferences, find the RTP dissector preferences, check 'Try to decode RTP outside of conversations'.

Thanks,
Jaap

On Fri, 17 Dec 2010 11:08:03 -0500, Romel Khan <[email protected]> wrote:

Say I have a capture with several thousand UDP packets with many different combinations of source and destination ports. I know all these packets are RTP protocol. Yet wireshark shows this as only UDP. Decoding every source and destination ports combination one by one to RTP using wireshark's well known "Decode as" means is not convenient. How can I decode all the packets to be decoded as RTP?