Ask Your Question

Revision history [back]

Help with "Unknown RTP Version 1" when analyzing RTP packets

I am trying to decode a wireless video stream over H.265/HECV. I set the "decode as" to RTP from UDP packets but now the in the info column It says Unknown RTP Version 1.

image description

I did make sure the port matches. I am also sure the stream is not encrypted as I made a decoder in a script that just straight decodes in H.265 with no decryption. My goal is to make this packet stream into a video playable file from wireshark.

For the most part the packet stream looks like this,

image description

My prediction is that the repeated len=1064 packets are the fragmented frame packets and maybe thats why the RTP decoder cant recognize it and just says "Unknown Version 1", however even knowing this I am not sure what to do. I am aware of the very few online resources on H.265 wireshark but none of them seemed to help me.

I am not sure where to go from here, I am new to wireshark, I have already spent over a week trying to learn how to do this but not having any luck. Any suggestions here would help.