Ask Your Question
0

Export RTP to raw missing

asked 2021-05-26 15:06:38 +0000

kb9mfd gravatar image

I have Wirehark 3.4.5, I am trying to export some VOIP calls to a file but I cannot find a way to do it. When I go to Telephony -> RTP -> RTP Streams -> (Select stream) -> Export the only option I have is to "save as type *.rtpdump" and I cannot save a .raw, I cannot get the .rtpdump file to play in audacity. Any suggestions? All the instructions show to save in .raw format, but in my wireshark that is missing.

edit retag flag offensive close merge delete

Comments

Can you share a link to "All the instructions"?

Chuckc gravatar imageChuckc ( 2021-05-26 15:38:24 +0000 )edit

https://osqa-ask.wireshark.org/questi...

https://community.cisco.com/t5/ip-tel...

To name a couple. I had to use a old version of wireshark on my Linux box, and it had the .raw and .au options, but in my Windows 10 machine where I do most of my work, its not there. The old version does not have VOIP Calls so I have to hunt to find the audio stream, so I look up the call in the Windows client, find the packet number and decode it on the Linux client to export it. Got the job done but is a royal pain to do. Unless I am missing something I cannot find anywhere in the Windows client to export as raw, I can play it in the RTP Player, but not export it.

kb9mfd gravatar imagekb9mfd ( 2021-05-26 16:22:51 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
1

answered 2021-05-26 17:15:19 +0000

Chuckc gravatar image

updated 2021-05-26 17:20:01 +0000

The articles mention "RTP Stream Analysis" which is different than the "RTP Streams" window.

It will be moving in 3.5 (https://www.wireshark.org/docs/wsug_h...):

Stream Analysis window contained tool for save audio and payload for analyzed streams. This tool was moved in Wireshark 3.5.0 to RTP Player window. New tool has more features.

In 3.4.5 it's available in the Stream Analysis window:

image description

Raw (*.raw) is only available for Forward or Reverse, not Forward and Reverse.

edit flag offensive delete link more

Comments

Ah, didn't see that there. Thanks!

kb9mfd gravatar imagekb9mfd ( 2021-05-26 17:32:53 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-05-26 15:06:38 +0000

Seen: 1,786 times

Last updated: May 26 '21