This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

pcap file VoIP analysis issue

0

All,

I did a packet capture on our gateway on the VoIP interface (we're having issues).

I was able to play the voip calls successfully using telephony -> voip calls -> player -> decode etc. I left my computer for a little while and went back to play the calls again from the same pcap file. Now it's showing that the files are 100% out of sequence and the timestamps are all incorrect. These are the same calls I was successfully able to playback not 20 mins prior. The pcap has not been changed in any way. Has anyone experienced this?

asked 26 Oct '14, 14:16

bitskrieg's gravatar image

bitskrieg
11112
accept rate: 0%

what is your

  • OS and OS version
  • Wireshark version
(26 Oct '14, 15:29) Kurt Knochner ♦

Win 7 x64 WS 1.8.2 x64 WinPCap 4.1.3

(26 Oct '14, 15:31) bitskrieg

One Answer:

0

There have been issues with the RTP player. Please upgrade Wireshark to the latest version (currently 1.12.1) and then check if the problem is still there.

Regards
Kurt

answered 26 Oct '14, 15:34

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Tried that, when I update to 1.12.1 it doesn't even detect my ULAW streams correctly, only the g.729 ones. Anything higher than 1.8.2 doesn't find g.711 conversations (for me anyway).

(26 Oct '14, 15:40) bitskrieg