Ask Your Question

Large RTP packet analysis - Wireshark misreporting statistics

asked 2019-01-04 20:51:51 +0000

swinster gravatar image

I have a large packet capture of a RTP stream over UDP (nearly 600,000 packets). This means the the sequence number wraps many times. In addition, the payload type of the of the RTP packet changes which Wireshark flags up as incorrect, so moving the the "Next Problem Packet" in the stream analysis is pretty useless. The alternative payload in this case are FEC packets, which continue the RTP sequence number.

Is there any way to simply check the incrementing sequence numbers for the entire stream and ignore payload type changes?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2019-01-04 22:18:04 +0000

Guy Harris gravatar image

That sounds like either a bug or an enhancement request, so you should file a bug/enhancement request on the Wireshark Bugzilla.

edit flag offensive delete link more


The Wireshark RTP analysis was mainly designed for handling of PCM encoded voice streams. In order to be better suited to handle other profiles as well, these restrictions could be lifted, although that could impact the validity of the media stream export functions.

Jaap gravatar imageJaap ( 2019-01-05 18:00:59 +0000 )edit

In this particular case (and indeed the pretty much all cases we deal with that relate to media) WIreshark can't decode the CODECs used as media has moved a LONG way since the simple VoIP days and G.711. We analyse video (H264, H246UC, VP8, VP9 etc), higher quality audio (AAC, G.722.1C, G722.1 etc), RDP, and the like. We use wireshark to analyse the RTP streams, but we need a proper understanding of the raw stream that has been sent and received.

swinster gravatar imageswinster ( 2019-01-06 00:23:29 +0000 )edit

Bug 15403 submitted.

swinster gravatar imageswinster ( 2019-01-06 00:45:39 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2019-01-04 20:51:51 +0000

Seen: 552 times

Last updated: Jan 04 '19