Large RTP packet analysis - Wireshark misreporting statistics

asked 2019-01-04 20:51:51 +0000

swinster
1 ●2 ●3 ●2

I have a large packet capture of a RTP stream over UDP (nearly 600,000 packets). This means the the sequence number wraps many times. In addition, the payload type of the of the RTP packet changes which Wireshark flags up as incorrect, so moving the the "Next Problem Packet" in the stream analysis is pretty useless. The alternative payload in this case are FEC packets, which continue the RTP sequence number.

Is there any way to simply check the incrementing sequence numbers for the entire stream and ignore payload type changes?

answered 2019-01-04 22:18:04 +0000

Guy Harris
19890 ●3 ●660 ●207

That sounds like either a bug or an enhancement request, so you should file a bug/enhancement request on the Wireshark Bugzilla.

edit flag offensive delete link

Comments

The Wireshark RTP analysis was mainly designed for handling of PCM encoded voice streams. In order to be better suited to handle other profiles as well, these restrictions could be lifted, although that could impact the validity of the media stream export functions.

Jaap ( 2019-01-05 18:00:59 +0000 )edit

In this particular case (and indeed the pretty much all cases we deal with that relate to media) WIreshark can't decode the CODECs used as media has moved a LONG way since the simple VoIP days and G.711. We analyse video (H264, H246UC, VP8, VP9 etc), higher quality audio (AAC, G.722.1C, G722.1 etc), RDP, and the like. We use wireshark to analyse the RTP streams, but we need a proper understanding of the raw stream that has been sent and received.

swinster ( 2019-01-06 00:23:29 +0000 )edit

Bug 15403 submitted.

swinster ( 2019-01-06 00:45:39 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Large RTP packet analysis - Wireshark misreporting statistics

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Large RTP packet analysis - Wireshark misreporting statistics edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

Large RTP packet analysis - Wireshark misreporting statistics