Ask Your Question

Why wireshark capture RTP when portmirroring? why doesn't WS capture RTP if not in portmirroring??

asked 2019-11-08 13:37:23 +0000

updated 2019-11-08 13:40:47 +0000

grahamb gravatar image

Hello, I set simple VoIP testbed.

1 Hub connected with 4 PCs (1 SIP Server, 2 SIP UserAgent, 1 Sniffing Computer)

I installed Wireshark in Server PC and Sniffing Computer.

I did portmirroring between 1 SIP UserAgent and 1 Sniffing Computer.

And I start VoIP Call between UAs.

Wireshark in Sniffing Computer captured RTP, SIP/SDP, UDP packets.

but Server PC did not capture RTP packets but UDP, SIP/SDP.

why did not Server PC capture RTP packet????

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2019-11-08 15:00:12 +0000

Jaap gravatar image

That is because the media stream is setup directly between the UA's, it does not go via the SIP server. That is only there for the signalling, not the media.

edit flag offensive delete link more


Thank you!

daljaru gravatar imagedaljaru ( 2019-11-08 15:52:41 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2019-11-08 13:37:23 +0000

Seen: 176 times

Last updated: Nov 08 '19