Hi !
Thanks for the information. I read this before that RTP run on top of UDP and I can use the decode option. But the problem is that what If i am not sure about that which UDP packet is RTP.
I have the .pcap file with me right now.
Why my wireshark can recognise the RTP out of same traffic and not his. Can I do some settings on his end other than decode as ?
Regards,
Date: Tue, 6 Apr 2010 07:16:28 +1000
From:
martinvisser99@xxxxxxxxxTo:
wireshark-users@xxxxxxxxxxxxxSubject: Re: [Wireshark-users] Cannot see RTP packets on end
The problem will be that your friends capture probably has not seen the the related SIP or RTSP control packets associated with the conversation. RTP runs on top of UDP, but is doesn't use a fixed or well known port, so it is difficult for Wireshark to always determine whether particular UDP packets are UDP. If you right-click on a UDP packet that you think is RTP and use "Decode As..." to select RTP, you should get the result you are after.
Regards, Martin
MartinVisser99@xxxxxxxxx
Hotmail: Powerful Free email with security by Microsoft.
Get it now.