Ethereal-users: Re: [Ethereal-users] how does ethereal determine whether RTP or not?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 4 Sep 2003 22:40:47 -0700
On Thu, Sep 04, 2003 at 10:00:43PM -0700, Chet Seligman wrote:
> I've been looking at RTP also.
> I didn't realize that ethereal could identify RTP.

Ethereal can identify RTP *if there are packets in the trace, before the
RTP packets, that give it enough information to do so*.

It doesn't identify RTP packets *without* any such information.

> I thought the user had to identify the ports and then ethereal would find
> them - am I wrong?

Yes, and no.

Yes, if there is no H.245 or RTSP traffic before the RTP traffic to tell
Ethereal that IP address XXX/port YYY and IP address ZZZ/port WWW will
be exchanging RTP traffic.

No, if there is such traffic.