Ask Your Question
0

Can Wireshark play Opus packets?

asked 2025-02-06 15:58:55 +0000

Capture Poly devices using Wireshark. CODEC used is OPUS. Cannot play the streams.

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
1

answered 2025-02-08 07:30:31 +0000

Jaap gravatar image

You say this RTP payload is OPUS, but:

  • The OPUS dissector doesn't recognises it as such (plenty of malformed packets)
  • The RTP format for OPUS was established some time ago (RFC 7587)
  • The signalling establishing the RTP session isn't there, so there's no way to know about the specifics of media session
  • The fact that there is (possibly) related TLS traffic and a SIP services is involved leads me to believe that the signalling may be encrypted
  • The fact that the signalling may be encrypted could suggest we're looking at Secure RTP here
  • The fact that the related RTCP packets contain various outlandish values suggest to me that these are Secure RTCP packets as well

My conclusion: You are looking at Secure RTP here, which cannot be played.

edit flag offensive delete link more
0

answered 2025-02-07 06:17:12 +0000

Guy Harris gravatar image

There is an Opus decoder (for audio playing) in Wireshark since at least 3.4, but perhaps there's some reason why it can't handle the Polycom traffic. You might want to submit this as an issue on the Wireshark issue list; provide full details of the version you were running and the operating system on which you were running it, give details of how you tried to play it and what the system did when you tried, and attach a capture that failed to play.

If the bug is fixed, anybody who has the capture will be able to play the audio, so, if you're going to upload a capture, I'd suggest trying to generate a sample capture with audio that's OK to make public, such as "Mr. Watson, come here...".

If you don't want MAC or IP addresses, or other data such as connection initiation traffic, in the capture to be publicly available, you should check the "This issue is confidential and should only be visible to team members with at least the Planner role." checkbox, which is just below the big text box for "Description".

edit flag offensive delete link more

Comments

Download test capture Poly OPUS.pcapng. Decode UDP 16386 < > 21790 as RTP. Select Streams and select Play Streams. When I play the streams they are inaudible. Windows 11 Enterprise Version 24H2. Wireshark Version 4.4.3

Capture and pic of Play Streams are here - https://share.univerge.blue/us4/s/wtt...

kpittman63 gravatar imagekpittman63 ( 2025-02-07 14:54:08 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2025-02-06 15:58:55 +0000

Seen: 145 times

Last updated: Feb 07