Ask Your Question
0

Decoding RTP packet - Unknown RTP version 0

asked 2018-06-28 00:55:04 +0000

ur2cdanger gravatar image

updated 2018-06-28 20:57:39 +0000

grahamb gravatar image

I am trying to analyze a packet file that is a capture of video conversation. However, I do not understand some of the packets decoded by Wireshark. It looks like STUN packets but Wireshark decodes it as RTP packets with info showing "Unknown RTP version 0". How to analyze these RTP packets as STUN packets?

55  18.898682   10.4.3.248  10.4.7.163  RTP 374 Unknown RTP version 0

Real-Time Transport Protocol
        00.. .... = Version: Old VAT Version (0)
Data (332 bytes)
        Data: 01080c0200161851c159e46a3dd0939b5ee2a0382fc05869...
        [Length: 332]

Any help would be welcome.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-06-28 06:31:04 +0000

Jaap gravatar image

Go to the Preferences, and in the protocol list pick out RTP. Then you'll have the option to select what RTP version 0 should be dissected as: "Invalid or ZRTP", "STUN", "Classic STUN", "T.38" or "SPRT".

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-06-28 00:55:04 +0000

Seen: 5,692 times

Last updated: Jun 28 '18