This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi there,

i captured some udp packets while streaming my webcam in order to reassemble them to a video. Unfortunately i even don't know the type of that video stream. Wireshark is just defining the packets as UDP and no hint concerning RTP or any other streaming format. How can i proceed with my analysis, without knowing the type?

I followed the UDP Stream with my src ip and extracted it to a raw File. Mystream.raw

What would be the next steps? Thank you.

asked 28 Jul '13, 15:05

Yggdrasil's gravatar image

Yggdrasil
1112
accept rate: 0%

edited 19 Aug '13, 15:22

as you updated the link of the file, are there any advances with your problem?

(20 Aug '13, 01:33) Kurt Knochner ♦

i captured some udp packets while streaming my webcam ... Unfortunately i even don't know the type of that video stream.

Well, that's a problem and the vendor of that webcam may well use it's own encoding. There might also be some form of encryption/data scrambling in place to prevent others from intercepting and viewing the video.

I followed the UDP Stream with my src ip and extracted it to a raw File. Mystream.raw

That looks like raw data. I tried to identify it with the file command on linux, and it also detects no known format.

So, either you extracted the wrong thing, not all data, or the data stream is in a proprietary format of that vendor.

What would be the next steps?

Figure out what data format is used by that vendor, by contacting the vendor support.

BTW: If you are able to post a capture file (on google docs, dropbox, etc.) of a whole video streaming session, someone here might be able to help. BEWARE the privacy issues in doing so!

Regards
Kurt

permanent link

answered 29 Jul '13, 01:59

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 29 Jul '13, 05:53

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×166
×82
×26
×1

question asked: 28 Jul '13, 15:05

question was seen: 4,791 times

last updated: 20 Aug '13, 01:33

p​o​w​e​r​e​d by O​S​Q​A