This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to obtain sequence number of RTP while using tshark command line?

0

I tried this script and I get a csv file with all content except the RTP sequence number. I've already used "-e rtp.seq":

tshark -Y "udp.srcport == 2346" -T fields -n -r "C:\not_land.pcap" -E separator=, -e ip.src -e ip.dst -e ip.proto -e udp.srcport -e rtp.seq >> "C:\not_land.csv"

Is there any problem with this command?

asked 28 Apr '15, 00:05

DiveDave's gravatar image

DiveDave
21559
accept rate: 100%


One Answer:

0

Either use Wireshark to set the preference 'Try to decode RTP outside of conversations' or pass it in via the command line.

answered 28 Apr '15, 09:07

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Thanks for helping. I solved this problem by adding "-o rtp.heuristic_rtp:TRUE" in my command :)

(30 Apr '15, 04:20) DiveDave