Ethereal-users: [Ethereal-users] RTP packet decoding

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Robert Ancell <robert.ancell@xxxxxxxxxx>
Date: Thu, 04 Mar 2004 16:11:35 +1300
Hi all,

I've been using to Ethereal to analyse some RTP packet streams i've been generating... However when I seem to have found a bug when decoding RTP/RTCP streams. When I force my UDP/IP (dst port 13412) packet stream to decode as RTP it decodes that and the adjacent RTCP stream as RTP (which it is not). If I set decode dst port 13412 to RTCP it has no effect. Trying combinations shows RTP decode seems to be overriding RTCP decode.

Note both the RTP and RTCP streams come from UDP source port 13412 (multicast from the same host). I don't think this should be a problem. Please find attached the pcap file of an example stream.

Also when using "Decode as..." I always find I always seem to decode using the destination UDP port and not the source UDP port (which is the default selection). Do other people use them the other way around, if not the UI would be nicer with destination as the default.

I have Ethereal 0.10.1 on Debian unstable.

Thanks for the great software!
--Robert Ancell

Attachment: rtp_test.pcap
Description: Binary data