Wireshark · Wireshark-users: Re: [Wireshark-users] Displaying RAP for VoIP calls

["Keith French" <keithfrench@xxxxxxxxxxxxx>]

One other thing, when you filter from VoIP calls it cannot always find any RTP packets. In that case what I do is find one in the “Flow” diagram & click on it. That will cause the main decode to jump to that packet. Then go into the RTP header & use the setup frame method.

 

Keith.

 

From: Ira Tessler

Sent: Friday, August 19, 2011 9:16 PM

To: Community support list for Wireshark

Subject: Re: [Wireshark-users] Displaying RTP for VoIP calls

 

Thank you. That worked!

 

Ira Tessler

ConnectMe

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Keith French
Sent: Friday, August 19, 2011 2:29 PM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] Displaying RTP for VoIP calls

 

Ira,

 

One way is to open up the RTP header & find the “Setup Frame” which is under the “stream set up by XXX” depending on your call setup protocol. Then right click on it, Prepare a filter > Or selected. Another way is to use the SSID (Synchronisation Source Identifier) field in the RTP header, prepare a filter as before. However, doing this on one packet will probably only give you one direction, you will most likely have to repeat this on the other RTP packet, to get the complete call.

 

Keith French.

 

From: Ira Tessler

Sent: Friday, August 19, 2011 6:57 PM

To: wireshark-users@xxxxxxxxxxxxx

Subject: [Wireshark-users] Displaying RTP for VoIP calls

 

I am trying to trouble shoot VoIP calls using Wireshark 1.6.0. I have many calls in one pcap file. I can display all the VoIP calls in the file by going to Telephony->Voip Calls. I can select a call, listen to the RTP stream. When I click on “Prepare Filter” and apply the filter, the resulting display only shows two RTP packs. How can I see all the RTP packs related to the selected VoIP calls?

 

Ira Tessler

ConnectMe

 

---

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

---

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe