Occasionally when I want to play back/analyze voip rtp traffic, I end up with no waveforms. I have this happen on Windows, Linux, and OS X platforms. Screenshot available at http://www.apple2pl.us/screenshot.png Is there something that I'm not doing that I should be? asked 27 May '13, 05:16 cracklincrotch edited 27 May '13, 05:17 |
One Answer:
As far as I know, wireshark RTP stream decoding is limited to G.711 (A-law or u-law). Are you sure the captures with a 'blank screen' are encoded with G.711? Regards answered 27 May '13, 14:22 Kurt Knochner ♦ |
All RTP packets are G.711 u-law. Hitting the player button plays the audio fine. Just no waveforms, marked wrong timestamps, dropped packets, etc.
I should add, this is not the first time I've had this issue. There is no pattern to it. But I've seen this happen from time to time since 2011.
sounds like a yet undiscovered (and hard to detect) bug.