Tshark doesnt detect RTP with "rtp.heuristic_rtp: TRUE" enabled
Hi, I want Tshark to output RTP statistics to a textfile, but it only works in one direction. Reason is that in wireshark you need to "decode as" the packets as "STUN" packets, because sending side RTP is encapsulated inside STUN (receiving side works fine). Then it is correctly detected and handled as RTP traffic (picture) in wireshark, but not in tshark. :( I specified the working (decode as)Wireshark profile, but tshark still only show RTP statistics for one direction.
tshark.exe -r .\Teams.pcapng -C "UDP VOIP (STUN)" -o "rtp.heuristic_rtp: TRUE" -qz rtp,streams >text.txt
Questions:
1) Anyone knows how to make it work with tshark? Or...
2) Can you remove STUN headers with tshark/editcap so that it is detected as RTP traffic?
Thank you