This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How I know it is H.264 packet capture?

0

I use Wireshark to cature raw data from a direct IP.src video stream which has H.264 format. However when I look at the information in a package, I find out there is nothing indicated it was H.264 format

a. What information would show it was H.264 format?

b. I have read some information how to inteprete H.264 by using Edit --> Preferences --> Protocols --> H264 ... but then I don't know what to do with the last step which fill-in H264 Dynamic Payload Types

Can anyone help? My main question is how I know it was H.264 packet?

Thanks for any help

asked 18 Aug '14, 11:48

Curious52's gravatar image

Curious52
16●1●1●3
accept rate: 0%

edited 18 Aug '14, 11:49

One Answer:

1

It's me again. Meanwhile I was waiting for the answer I did ask for help from my coleague & we work for awhile until we found the way:

  • At first, we must get the Wiresahrk ready for capture only with the intended H.264 video stream
  • Secondly, start the video stream (i.e. VLC Player at the same PC with using Wireshark)
  • Then the Captured Packet will be shown on Wireshark screen
  • In one of the Packet, the Real Time Stream Protocol/Media Attribute will show: rtpmap: 98 H264/90000 (in my case)

Note: It only shows in those first packets! When i placed my question: at that time I was looking after ... therefore I missed this packet info.

This solve my issue, I hope that it also help someone looking the same issue as me!

Cheers!

answered 18 Aug '14, 13:25

Curious52's gravatar image

Curious52
16●1●1●3
accept rate: 0%

edited 18 Aug '14, 13:26

If we did a packet string search by "H264" or just "264", we should be able to locate the specific packet by no more than tens of clicks.

(19 Aug '14, 02:42) SteveZhou