This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How do I filter by payload type?

0

Given my raw pcap I go to Telephony > RTP > show all streams.

I have 2 streams of h264 and 2 streams of mp4-latm. I have a method in my script to obtain and iterate through ssrc values. However, it iterates through a variable which contains all four ssrc values. I need a filter to parse out the mp4-latm.

rtp.p_type==h264 does not work. I still see the ssrc for mp4-latm.

I need a read filter which only reads through h264 payload type field, and NOT mp4-latm field. Help would me much appreciated, thanks.

asked 22 Feb '16, 10:50

testname0110's gravatar image

testname0110
15559
accept rate: 75%


One Answer:

0

figured it out. You want to add the read filter to your tshark command:

"-2 -R rtp.p_type==xxx" where "xxx" is the number of your dynamic payload type.

the dynamic payload type should be readable from your wireshark pcap file and is a number like 96 or 126

answered 22 Feb '16, 14:22

testname0110's gravatar image

testname0110
15559
accept rate: 75%

edited 22 Feb '16, 14:23