Hi,
Have a look in your configuration file heuristic_protos. There's this entry:
rtp_udp,1
If it says '0' instead change it to '1'.
You can do this via the GUI, go to menu Analyze|Enabled Protocols...
Then search for RTP, and enable rtp_udp. Then leave the GUI and try tshark again
from the command line. It uses the same configuration files, so it should be
fine now.
Thanks,
Jaap
On 06-04-17 19:21, mahadevaswamy.h.n Swamy wrote:
> Hi,
>
> I am having a .pcap file which is having UDP packets. From which I want to
> decode as a RTP. I can do by using GUI but I want the same in command line.
> Could you please provide me the command line to do the same.
>
> I tried below command but it is throwing error as "tshark: illegal option -- 2"
>
> tshark -r filename.pcap -2R rtp -E header=y -E separator=, -T fields -e
> frame.number -e rtp.version > C:\Desktop\test.csv
>
>
>
> If you want more info please revert to me.
>
> Thanks in advance
>
> Br,
>
> Mahadevaswamy.HN
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
