 | 1 | initial version |
Fun fact: RTP packets are UDP packets.
With that out of the way, there are three ways in which Wireshark can dissect the UDP payloads as RTP :
With the first one, there's another protocol, e.g. SDP, that sets up a media session where RTP packets are exchanged. Wireshark can use this to figure out that certain UDP packets contain RTP. With the second one, you point out to Wireshark to treat the UDP packets as containing RTP, whether or not that is true. With the third, Wireshark tries to make an educated guess if UDP packets contain RTP. That guessing is very limited though.
So either of these options have to apply to get the result you seek.
