This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

RTP Multiplex dissector

0

Hello guys,

I need to decode RTP Multiplex streams using Wireshark. Presently we can decode only Non -Multiplexed RTP streams in wireshark.

Also I need to know the steps to add dissector in Wireshark.

Thanks// Vikas

asked 13 Mar '13, 02:48

Viki's gravatar image

Viki
11●2●2●4
accept rate: 0%

2 Answers:

2

See the source code section of http://wiki.wireshark.org/SendingFilesToWireshark?highlight=%28submit%29

answered 13 Mar '13, 05:30

Anders's gravatar image

Anders ♦
4.6k●9●52
accept rate: 17%

Hi Anders,

Thanks for reply !! I am not a very experienced user of wireshark yet.I need to decode RTP Multiplex streams using Wireshark. As i understand wireshark not able to decode RTP Multiplexing packets,To decode RTP Multiplexing packet we need to load some dissector. So can you please let me know step by step how to load new plugin in wireshark for RTP multiplexing as i m not a coding software engineer.

I would appreciate if you could help me

Thanks// Vikas

(13 Mar '13, 06:02) Viki

If you are talking about RFC 5761: "Multiplexing RTP Data and Control Packets on a Single Port". No one has written code to dissect that yet so there is no plugin to load but rather code to be written :-)

(13 Mar '13, 13:37) Anders ♦

Hi,

I am talking about [RFC 3550 & RFC 3551],,We implemented RTP header compression on Nb & AoIP (3GPP TS 29.414 page no. 19 ).As per the "When header compression is used some fields (here called static fields) in the RTP header are not transmitted in the compressed RTP header, and other fields (here called dynamic fields) are transmitted in the compressed header"

So i just want to compare RTP header compressed & uncompressed field in wireshark.

Thanks// Vikas

(15 Mar '13, 02:38) Viki

In that case refer to this question.

(15 Mar '13, 03:23) Jaap ♦

1

You can do "decode as" NB_RTPMUX on a Nb mux packet.

answered 15 Mar '13, 04:56

Anders's gravatar image

Anders ♦
4.6k●9●52
accept rate: 17%

Hi Anders,

Thanks for reply..

Yes !! i want to decode the NB RTP multiplexing packet,,When i am using this option decode as "NB RTPMUX" it seems this decoded as standard format to both RTP compressed & Uncompressed as same .i still not confirm this packet is RTP compressed or uncompressed ,and also some Malformed data in RTP packet.

Thanks// Vikas

(18 Mar '13, 01:55) Viki

Are you using the latest version 1.8.6 or the development version 1.9.1? I think some bugs may have been fixed.

(18 Mar '13, 06:23) Anders ♦

Hi, I have also check one more option to decode RTP Compressed & Uncompressed packet in Decode as "CRTP" in Link. Could you please suggest if its relevant in my case.

Thanks// Vikas sharma

(18 Mar '13, 23:36) Viki