This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Play VIDEO - RTP packets

0

Hi!

I have a doubt. I am sniffing RTP packets from a IP camera. WireShark shows the RTP packets (payload type 96) in the capture. Is there any way to re-play those packets once it has been captured? I mean, I want to sniff some rtp data of a ip camera with videostreamming, and after that, play te video captured.

Thanks,

Regards

asked 10 Aug '16, 10:29

avatarreturn's gravatar image

avatarreturn
6112
accept rate: 0%


One Answer:

0

It depends on what you mean by re-play.

  • If you expect Wireshark to play the video from the camera, then the answer is currently no.

  • If you want to replay the captured packets to an application or hardware which can show an incoming video stream live, then it is still not a task for Wireshark or tshark, but there are tools which can replay capture files saved by Wireshark (or other application which can save a pcap formatted file). However, you'll need to complement the RTP stream with some control protocol which the video application supports, so that you could inform it what video codec to expect etc. To my knowledge, there are two options how to do this. You can use SIPp which allows you to control the video session using SIP (and no other protocol) and play only the RTP from a pcap file, or you can use tcpreplay which would need a pre-captured and modified control session (in any protocol but lacking any interactivity, i.e. the video playing application would have to expect the RTP to come to a predictable port so that you could ask tcpreplay to modify the packet headers accordingly).

Or there is yet another chance: to repack the payload from the RTP packets to some media file format like Ogg which can be played by video file player such as VLC media player. That, however, requires some coding in [your favourite programming language], or filing an enhancement request at WIreshark bugzilla.

answered 10 Aug '16, 11:44

sindy's gravatar image

sindy
6.0k4851
accept rate: 24%

edited 10 Aug '16, 12:06