[Guy Harris <guy@xxxxxxxxxxxx>]

On Nov 21, 2003, at 12:22 PM, Ed Shrum wrote:

> Hopefully this isn't too redundant of a question.  I have checked the 
> achives and find many similar questions, but they reference much older 
> versions of Ethereal.  I am using the latest version (0.9.16) and 
> trying to capture RTP associated with a SIP session.  Attached   I see 
> in the SIP Invite message that where it references the UDP to be used 
> for RTP (e.g. 2581), but Ethereal does not see it as the UDP packets 
> as RTP and I can therefore not use the RTP analsys tool.

Ethereal sees the Invite message if it's in the capture, but 0.9.16 
doesn't use that information to flag subsequent packets as RTP; the 
current CVS version does, so that'll be in the next release.

Until then, you can use, as the other reply mentioned, the "Decode 
As..." menu item.