09-25-2008 11:32 AM - edited 03-17-2019 09:30 PM
Is there a way to verify the codec that's encapsulated in a udp packet if you are performing a capture on the ingress of a router or switch port?
Thanks,
Brandon
09-26-2008 04:03 AM
You can use the Ethereal or Wireshark applications for decode the RTP packets and see the codec.
03-30-2010 11:38 AM
Wireshark is really nice
Make sure to uncheck the boxes for Enable MAC name resolution and Enable transport name resolution
03-31-2010 01:28 AM
Hi
Well - as suggested the Wireshark community is probably a better place to start...
That said... try:
1) Make sure that you have identified the two streams as RTP. Wireshark doesn't see stuff as RTP initially, so you have to click a packet from each stream direction and set 'Decode As... ' to RTP.
2) When you do Telephone/RTP/Show All Streams you should see a stream for each direction, then click on one and hit analyse...
3) If it won't export 'both' directions, try one direction.. if that works then you haven't marked both streams as RTP, or there's another problem.
Would suggest posting your capture here or at wireshark in that case.
Regards
Aaron
Please rate helpful posts..
03-31-2010 06:02 AM
to fix my problem,
i had to Make sure to uncheck the boxes for Enable MAC name resolution and Enable transport name resolution.
without that I was not able to save the payload to an audio file
thanks
03-30-2010 12:00 PM
Wireshark questions should go to Wireshark community.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: