Wireshark-users: Re: [Wireshark-users] Is it possible to specify dynamic payload type in tshark?

From: Jaap Keuter <jaap.keuter@xxxxxxxxx>
Date: Wed, 13 Oct 2021 12:54:29 +0200
Hi,

Have a look in your preferences file. There you’ll find an entry for evs.dynamic.payload.type. Use that on the command line with -o.

Thanks,
Jaap

> On 13 Oct 2021, at 10:45, Nan Xiao <xiaonan830818@xxxxxxxxx> wrote:
> 
> Hi Community,
> 
> Greetings from me!
> 
> I have a RTP packet whose payload type is "109", and actually it is EVS payload type. For some reason, I can't get SIP/SDP packets. But through setting "EVS dynamic payload types", I can decode the packet finally.
> 
> I want to know whether it is possible to do the same thing through tshark. i.e., I tried to use following command:
> 
> $ ./run/tshark -r ~/evs.pcapng -d udp.port==20956,evs
> 
> tshark reported error: tshark: Protocol "evs" isn't valid for layer type "udp.port".
> 
> The pcap file is attached for reference, thanks in advance!
> 
> Best Regards
> Nan Xiao

Attachment: evs.pcapng
Description: Binary data

> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe