In my captured file (pcap) I can see SIP/SDP packets. But No RTP. I tried decoding UDP as RTP, but still wireshark cannot see RTP sessions. Here is one of the SIP/SDP packet data. What can be the reason ? Any possible solutions ? I will post more pictures if need more to find the problem. Any suggestions Please. Thanks UPDATE: I have uploaded the file in cloudshark. This is the link: https://www.cloudshark.org/captures/8dc9fe0edaeb This question is marked "community wiki". asked 11 May '15, 03:57  Shas edited 11 May '15, 04:46 |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
ANNOUNCEMENT TO ANYONE: DON"T POST PICTURES! These are useless for analysis. Supply capture files through a file share service or cloudshark.
Yep, this capture sure helps to understand what's going on.
There's HTTPS traffic to the same box. I assume for management/monitoring? Or is it call related?
Does the installation support Compressed RTP? I can't see that packet capture as such.
You're connecting to facebook as well. I guess this is not part of your problem at hand? Might try to clean up your network traffic as good as possible when investigating a problem, this 'noise' makes it harder for you to get a feel for what's happening with your protocol.
I see you are using CSipSimple on your Samsung Android smartphone and registering to your Asterisk PBX, but this capture does not include any Call setup (INVITE) that shows any SDP negotiation.....only SDP information pertaining to OPTIONS requests.
Try starting a capture BEFORE your attempted call, and then stopping the capture AFTER the call attempt is terminated.....then repost the new capture.
As far as NOISE goes, that can be filtered out with display filters. Its always good to have to full capture, in case this is an issue at L2.
@Rooster_50, @Jaap, I tried to capture the session with same application, with same kind of network connection (from the beginning). But now it seems I dont have any SIP/SDP packets. Just UDPs.