Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Open "Statistics -> Conversations", then click on the UDP tab. Sort by number of bytes (twice, so the conversations with the most data show up at the top). If the audio is in the trace, it should show up high in the list. Filter on each of the top conversations and check in the packet list whether the packets look like RTP (same size, evenly spread at 20ms intervals in both directions). Then right-click on one of the packets and choose "Decode As" and change the protocol to RTP to dissect this UDP stream as RTP. This will enable playback.

Another way is to enable the RTP heuristics dissector by going to "Analyze -> Enabled protocols". Then type RTP in the search bar and then look for "rtp_udp" and enable it. Then if there are RTP streams in the trace that miss the signaling, they will show up in the RTP streams overview.