Wireshark · Wireshark-users: Re: [Wireshark-users] RTP over UDP not automatically detected

[Guy Harris <guy@xxxxxxxxxxxx>]

maurizio simoni wrote:

> RTP is not automatically detected over UDP.

RTP is difficult to detect reliably.

There is a heuristic, but it's a weak heuristic, and not enabled by 
default.  Turn on the "Try to decode RTP outside of conversations" 
preference for RTP to enable it.

Note that it looks for a version number of 2 in the first octet, and a 
known payload type in the second octet, rather than a dynamic payload type.

> Same problem for RTCP.

Same solution for RTCP ("Try to decode RTCP outside of conversations" 
preference for RTCP); the heuristics are a bit stronger, but still not 
enabled by default.