Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] decoding multiple packets to a protocol

From: "RUOFF, LARS (LARS)** CTR **" <lars.ruoff@xxxxxxxxxxxxxxxxxx>
Date: Fri, 17 Dec 2010 17:24:19 +0100

Damn, Jaap beat me again…

 


From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Jaap Keuter
Sent: vendredi 17 décembre 2010 17:19
To: Developer support list for Wireshark
Subject: Re: [Wireshark-dev] decoding multiple packets to a protocol

 

Hi,

Go to preferences, find the RTP dissector preferences, check 'Try to decode RTP outside of conversations'.

Thanks,
Jaap

On Fri, 17 Dec 2010 11:08:03 -0500, Romel Khan <romel.khan@xxxxxxx> wrote:

Say I have a capture with several thousand UDP packets with many different combinations of source and destination ports. I know all these packets are RTP protocol. Yet wireshark shows this as only UDP. Decoding every source and destination ports combination one by one to RTP using wireshark's well known "Decode as" means is not convenient. How can I decode all the packets to be decoded as RTP?