Ethereal-dev: Re: [Ethereal-dev] RTP and RTCP automaticaly decode, for a range of ports

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxx>
Date: Thu, 25 Jul 2002 13:24:08 -0700
On Thu, Jul 25, 2002 at 03:25:54PM -0400, Anand V. Narwani wrote:
> I've tested the same thing with SnifferPro and they seem to be able to 
> identify RTP/RTCP frames without access to frames from a signalling 
> protocol.

Several other people have reported the same thing.

  I tested this by capturing a few RTP frames and opening the 
> capture with only RTP frames in sniffer pro.  It was able to identify the 
> frames as RTP.  So my question is: Does anyone know how they might be able 
> to do this other than by a brute force method?

I certainly don't.

If somebody else does, it'd be nice if they implemented that and tested
it, and sent us the changes.