Wireshark-bugs: [Wireshark-bugs] [Bug 6322] New: RTP Stream Analysis does not work for TURN-enca
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 8 Sep 2011 06:45:43 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6322

           Summary: RTP Stream Analysis does not work for
                    TURN-encapsulated RTP
           Product: Wireshark
           Version: 1.6.1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: TShark
        AssignedTo: bugzilla-admin@xxxxxxxxxxxxx
        ReportedBy: kenstir@xxxxxxxxx


Created an attachment (id=6953)
 --> (https://bugs.wireshark.org/bugzilla/attachment.cgi?id=6953)
pcap containing TURN-encapsulated RTP

Build Information:
TShark 1.6.1 (SVN Rev 38096 from /trunk-1.6)

I also tried my trunk build:

TShark 1.7.0-kenstir-20110831 (SVN Rev 38820 from /trunk)
--
If you have an RTP stream encapsulated in TURN ChannelData messages, then RTP
Stream Analysis does not work:

c:\src\wireshark\trunk>"c:\Program Files\Wireshark\tshark.exe" -qr
c:\pcaps\rtp_turn.pcap -z rtp,streams
========================= RTP Streams ========================
    Src IP addr  Port    Dest IP addr  Port       SSRC          Payload  Pkts  
      Lost   Max Delta(ms)  Max Jitter(ms) Mean Jitter(ms) Problems?
==============================================================

With this small patch it does:

c:\src\wireshark\trunk>wireshark-gtk2\tshark.exe -qr c:\pcaps\rtp_turn.pcap -z
rtp,streams
========================= RTP Streams ========================
    Src IP addr  Port    Dest IP addr  Port       SSRC          Payload  Pkts  
      Lost   Max Delta(ms)  Max Jitter(ms) Mean Jitter(ms) Problems?
     10.0.7.209  4577   74.201.99.151  3478 0x00004BE4     Unknown(127)   109  
  0 (0.0%)         1000.42            7.72            2.48 X
  74.201.99.151  3478      10.0.7.209  4577 0x00C0F7E8     Unknown(127)   908  
  0 (0.0%)           25.29            0.72            0.34 X
==============================================================

The change causes dissect_stun_message() to pass control to subdissectors when
'tree' is NULL.

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.