This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

In this pcap file, I can find RTP, RTCP, and STUN packets. I tried to check which packet does negotiate for the codec, but couldnt find it. Can you please share any idea, where should I look to find this negotiation ?

packet_image

asked 09 May '15, 09:08

Shas's gravatar image

Shas
19910
accept rate: 0%


Some observations here:

  • I see some encrypted TCP communications
  • Of the so-called RTP/RTCP packets, most make no real sense (probably trapped by 'try to dissect outside conversation')

This leads me to believe that the UDP packets also contain some form of encrypted communication, which could be the VoIP packets you are looking for, but which won't reveil there contents.

permanent link

answered 09 May '15, 10:13

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×238
×12
×9

question asked: 09 May '15, 09:08

question was seen: 3,476 times

last updated: 09 May '15, 10:13

p​o​w​e​r​e​d by O​S​Q​A