This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

SIP Synchronization Source Identifier (SSRC) Determination Method

0

How does Wireshark determine the which RTP streams are part of a call. In a multiple stream PCAP, how does it determine who belongs to who?

thanks

Eric

asked 24 Sep '12, 14:31

EricKnaus's gravatar image

EricKnaus
46192026
accept rate: 0%


One Answer:

1

First of all SSRC stands for Synchronization Source Identifier in the context of RTP. It identifies the timestamping source used to, as you might have guessed, timestamp the RTP packets. Therefore it has nothing to do with SIP.

But how then does Wireshark relate RTP sessions to SIP sessions? It looks in the SIP/SDP payloads for connection identifiers (IP address and port number), and defines so called conversations for them.

answered 25 Sep '12, 06:20

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%