 | 1 | initial version |
G.711 is transported over RTP. RTP can be transported over UDP or TCP. But in your trace, it is transported over UDP. To analyze RTP, go to "Telephony -> RTP streams" and then select the two RTP flows and click on Analyze. In the resulting overview, you can see that there is ~3% packet loss from 192.168.73.1 -> 192.168.73.150. I suspect that this amount of packet-loss is enough to kill the Fax transmission, but I'm not 100% sure.
As the capture was made on 192.168.73.150 (as can be seen by the frames with a length smaller than 60 bytes), there could of course also be packetloss towards the 192.168.73.1, but you would need to capture on the .1 side to be able to determine this.
Please check the switch port statistics of the involved switches to see if there are any discards and/or errors on the ports.
From the ARP requests I assume the subnetmask for 192.168.73.150 is 255.255.255.0, which means 192.168.73.1 would be in the same subnet, however I see that the IP TTL of packets from 192.168.73.1 is 63. This indicates that there was a routing hop involved. Is 192.168.73.1 a NAT address? Or is the subnetmask for 192.168.73.1 misconfigured perhaps?
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
