I can't see SIP/RTP packets in Wireshark and I tried many ways to see the packets, but unfortunately, there is nothing happened. The computer and the phone that the calls happened from it use the same network. I decoded the UDP Protocol to RTP, but also nothing was shown.
Please I need help.
First configure the Wireshark application to see the UDP packet automatically as RTP. In Wireshark select: Analyse, Enabled Protocols, search for rtp, make sure all check boxes under rtp are checked the OK.
You can capture SIP/SDP/RTP/RTCP in one of the following ways: 1.Using a port mirror (Cisco calls it port span) 2.Running Wireshark on the PC if you using a soft phone 3.Using a inline Tapping device such as Shark Tap
Best method is either port span or inline TAP. Reason is that if you capture on PC you will only see QoS setting coming to you. The QoS setting going away from you would show up as CS0, which might not be correct.
Once you have captured a call, go to Telephony Tab, then RTP, then RTP streams. This should show your RTP packets per stream. Each stream has a unique SSRC. All packets related to the same stream will carry the same SSRC. So in short a normal call between two people will have two SSRCs, one for each direction of the call You can use the following filter to filter a specific stream rtp.ssrc== 0x0c1234 (where the 0x0c1234 is the value of the actual stream SSRC. This is just an example
Read The Fine Manual: https://wiki.wireshark.org/CaptureSet...
Asked: 2023-05-23 17:42:54 +0000
Seen: 519 times
Last updated: Nov 20
