This is our old Q&A Site. Please post any new questions and answers at

I use Wireshark mostly for reading SIP traffic and troubleshooting VoIP networks. In previous versions, the option (under Edit > Preferences > Protocols > RTP) "Try to decode RTP outside of conversations" was useful in cases in which sufficient SIP signaling is missing from the packet capture. Without that option checked, RTP is represented as UDP packets with unknown data payload.

In version 2 of Wireshark this option is missing, at least under RTP protocol preferences. Is it somewhere else? Is there another way to replicate this behavior?

(I am using both versions 1.12.10 and 2.0.2.)

asked 10 Mar '16, 05:52

Michael_Lindsey's gravatar image

accept rate: 0%

Starting from Wireshark 2.0, this option is replaced by the activation of RTP heuristic dissectors. Go to Analyze -> Enabled Protocols -> RTP and activate rtp_udp checkbox

permanent link

answered 10 Mar '16, 06:38

Pascal%20Quantin's gravatar image

Pascal Quantin
accept rate: 30%

edited 10 Mar '16, 06:38

Thank you! I have enabled it and will try that out.

(10 Mar '16, 07:36) Michael_Lindsey
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 10 Mar '16, 05:52

question was seen: 15,269 times

last updated: 10 Mar '16, 07:36

p​o​w​e​r​e​d by O​S​Q​A