Wireshark-dev: Re: [Wireshark-dev] decoding multiple packets to a protocol
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "RUOFF, LARS (LARS)** CTR **" <lars.ruoff@xxxxxxxxxxxxxxxxxx>
Date: Fri, 17 Dec 2010 17:22:09 +0100

Hi,

For RTP, there’s a heuristic:

Try

Preferences/RTP/Try to decode RTP outside of conversations = yes.

 

Regards,

Lars

 

 

From: wireshark-dev-bounces@xxxxxxxxxxxxx [mailto:wireshark-dev-bounces@xxxxxxxxxxxxx] On Behalf Of Romel Khan
Sent: vendredi 17 décembre 2010 17:08
To: wireshark-dev
Subject: [Wireshark-dev] decoding multiple packets to a protocol

 

Say I have a capture with several thousand UDP packets with many different combinations of source and destination ports. I know all these packets are RTP protocol. Yet wireshark shows this as only UDP. Decoding every source and destination ports combination one by one to RTP using wireshark's well known "Decode as" means is not convenient. How can I decode all the packets to be decoded as RTP?