This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to decode video stream if type is unknown?

0

Hi there,

i captured some udp packets while streaming my webcam in order to reassemble them to a video. Unfortunately i even don't know the type of that video stream. Wireshark is just defining the packets as UDP and no hint concerning RTP or any other streaming format. How can i proceed with my analysis, without knowing the type?

I followed the UDP Stream with my src ip and extracted it to a raw File. Mystream.raw

What would be the next steps? Thank you.

asked 28 Jul '13, 15:05

Yggdrasil's gravatar image

Yggdrasil
1112
accept rate: 0%

edited 19 Aug '13, 15:22

as you updated the link of the file, are there any advances with your problem?

(20 Aug '13, 01:33) Kurt Knochner ♦

One Answer:

0

i captured some udp packets while streaming my webcam ... Unfortunately i even don't know the type of that video stream.

Well, that's a problem and the vendor of that webcam may well use it's own encoding. There might also be some form of encryption/data scrambling in place to prevent others from intercepting and viewing the video.

I followed the UDP Stream with my src ip and extracted it to a raw File. Mystream.raw

That looks like raw data. I tried to identify it with the file command on linux, and it also detects no known format.

So, either you extracted the wrong thing, not all data, or the data stream is in a proprietary format of that vendor.

What would be the next steps?

Figure out what data format is used by that vendor, by contacting the vendor support.

BTW: If you are able to post a capture file (on google docs, dropbox, etc.) of a whole video streaming session, someone here might be able to help. BEWARE the privacy issues in doing so!

Regards
Kurt

answered 29 Jul '13, 01:59

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 29 Jul '13, 05:53