Wireshark-users: Re: [Wireshark-users] RTP over UDP not automatically detected

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Thu, 29 Nov 2007 10:52:10 -0800
maurizio simoni wrote:

RTP is not automatically detected over UDP.

RTP is difficult to detect reliably.

There is a heuristic, but it's a weak heuristic, and not enabled by default. Turn on the "Try to decode RTP outside of conversations" preference for RTP to enable it.

Note that it looks for a version number of 2 in the first octet, and a known payload type in the second octet, rather than a dynamic payload type.

Same problem for RTCP.

Same solution for RTCP ("Try to decode RTCP outside of conversations" preference for RTCP); the heuristics are a bit stronger, but still not enabled by default.