This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How does Wireshark determine the which RTP streams are part of a call. In a multiple stream PCAP, how does it determine who belongs to who?

thanks

Eric

asked 24 Sep '12, 14:31

EricKnaus's gravatar image

EricKnaus
46192026
accept rate: 0%


First of all SSRC stands for Synchronization Source Identifier in the context of RTP. It identifies the timestamping source used to, as you might have guessed, timestamp the RTP packets. Therefore it has nothing to do with SIP.

But how then does Wireshark relate RTP sessions to SIP sessions? It looks in the SIP/SDP payloads for connection identifiers (IP address and port number), and defines so called conversations for them.

permanent link

answered 25 Sep '12, 06:20

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×238
×139
×109

question asked: 24 Sep '12, 14:31

question was seen: 14,042 times

last updated: 31 May '13, 07:47

p​o​w​e​r​e​d by O​S​Q​A