wshark_de's profile - activity

Hi, I want Tshark to output RTP statistics to a textfile, but it only works in one direction. Reason is that in wireshark you need to "decode as" the packets as "STUN" packets, because sending side RTP is encapsulated inside STUN (receiving side works fine). Then it is correctly detected and handled as RTP traffic (picture) in wireshark, but not in tshark. :( I specified the working (decode as)Wireshark profile, but tshark still only show RTP statistics for one direction.

tshark.exe -r .\Teams.pcapng -C "UDP VOIP (STUN)" -o "rtp.heuristic_rtp: TRUE" -qz rtp,streams >text.txt

Questions:

1) Anyone knows how to make it work with tshark? Or...

2) Can you remove STUN headers with tshark/editcap so that it is detected as RTP traffic?

Thank you

Works. Thanks

Update: It works! Thanks for your reply. Unfortunately this did not change the result: tshark.exe -2 -r .\teams.pcapng

Thanks for your reply. Unfortunately this did not change the result: tshark.exe -2 -r .\teams.pcapng -C "UDP VOIP (STUN

Thanks for your reply. Unfortunately this did not change the result: tshark.exe -2 -r .\eams.pcapng -C "UDP VOIP (STUN)

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Tshark doesnt detect RTP "rtp.heuristic_rtp: TRUE" Hi, I want Tshark to output RTP statistics to a textfile, but it only

Thats true, but we captured with TAP devices and 20K $ Riverbed capture hardware. But your reply is mostly unrelated to

Thats true, but we captured with TAP devices and 20K $ Riverbed capture hardware. https://support.riverbed.com/bin/suppo

RTP - Display Lost Packets IO Graph + Sort question Hello Wireshark-Community, I am currently analyzing packet loss in s

RTP - Display Lost Packets IO Graph + Sort question Hello Wireshark-Community, I am currently analyzing packet loss in s

RTP - Display Lost Packets IO Graph + Sort question Hello Wireshark-Community, I am currently analyzing packet loss in s

Hello Wireshark-Community, we have two capture points in the network. At Access-SW + WAN-Edge to figure out if there is packet loss inside LAN. At Access there was of course much less traffic, compared to WAN edge where everything aggregates. Now, on WAN-Edge-Capture I want to filter out all the conversations that did not source from access switch.

So, is there a way to generate a Display/BPF Filter that only contains IP conversations from Access-SW capture file to that I can apply this filter to WAN-Edge capture file? I hope you understand my goal to only see common conversations that show up in both files?

Thank you!

Thanks and good idea. The only drawback is that the subnet is not local to this switch only (it is spanned) and there ar

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

Multi-Point capture - Generate filter from conversations in PCAP Hello Wireshark-Community, we have two capture points i

It is: Trend Micro InterScan Web Security Virtual Appliance (IWSVA). No access to logs yet, as admin is not in office an

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection, not server/client. Why? Hello Wireshark-Community, we have a challenge with our proxy server, b

Proxy closes connection with FIN. Not client/server. Why? Hello Wireshark-Community, we have a challenge with our proxy

We found a scheme when this happens. It happens for SMB database transfers only, after double-clicking the database file

We found a scheme when this happens. It happens for SMB database transfers only, after double-clicking the database file

Thanks, I will have a look at those outputs.

SMB2 - Suddenly only small block sizes requested by client Dear lovely community, one of our clients has problems with h

SMB2 - Suddenly only small block sizes requested by client Dear lovely community, one of our clients has problems with h

SMB2 - Suddenly only small block sizes requested by client Dear lovely community, one of our clients has problems with h