This is our old Q&A Site. Please post any new questions and answers at

I'm new to Wireshark. I did some traces from IP phone over a SIP trunk to the PSTN. Trace shows no RTP, but I know it was being used.

Is RTP off by default?


This question is marked "community wiki".

asked 15 Apr '11, 13:54

greekgeek's gravatar image

accept rate: 0%

Hi, If you look in the SIP messages carrying SDP you should see the IP and port used for RTP are those packages in the trace? Wireshark uses the SDP information to find out which packets are RTP if the SDP isn't present. Wireshark can't find the packets. Check out the RTP preferences for other options.

(16 Apr '11, 01:24) Anders ♦

I've got the same problem here. I am taking traces on an RTP stream that uses an SAP announcement with SDP information in it instead of getting the SDP info from RTSP. Wireshark is not recognizing the RTP packets.

(11 Apr '13, 01:26) Frostybeard

Go to Preferences | Protocols | RTP, check the box "Try to decode RTP outside of conversations".

permanent link

answered 11 Apr '13, 04:09

Jaap's gravatar image

Jaap ♦
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 15 Apr '11, 13:54

question was seen: 21,921 times

last updated: 11 Apr '13, 05:28

p​o​w​e​r​e​d by O​S​Q​A