Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

If using the standard sip port (sip 5060/tcp/udp/sctp # SIP), add a capture filter (-f "port 5060") to dumpcap.

Wiki page: Real-time Transport Protocol (RTP)

If using the standard sip port (sip 5060/tcp/udp/sctp # SIP), add a capture filter (-f "port 5060") to dumpcap.

To include rtp it would help to know the port range being used:
-f "portrange 6970-6999 or port 5060"

(Capture filter syntax: pcap-filter.7)