Wireshark-users: [Wireshark-users] Fwd: VOIPDiscount (Guy Harris)
From: Δημήτρης <firewallgr@xxxxxxxxx>
Date: Wed, 15 Jul 2009 14:20:24 +0300
I attach a capture file. In this capture i have enable the "try to
decode RTP outside of conversations"

Thankies
> Hello again I hope i reply proper
>
>>> I am using voipdiscount and i try to playback the call with
>>> wireshark,
>>> During the capture i only see udp packets nothing to establish a sip
>>> connection
>>
>> Perhaps the capture started after the call was set up?
> No. The capture starts before i launch the software.
>
>> Did any of the UDP packets appear to contain SIP requests or replies?
>> Were there any TCP segments containing SIP requests or replies?
> Nope.
>
>> The UDP packets might be RTP; try either decoding them as RTP or
>> turning on the "Try to decode RTP outside of conversations"
>> preference
>> for RTP
> if i decode i see unknown RTP version 1.

Then, whatever those UDP packets might be, they're not standard RTP,
so the RTP player won't help.

It sounds as if either

      1) you're not capturing all the traffic for VOIPDiscount

or

      2) they're using non-standard protocols.

We'd have to see one of your captures to determine which of those is
the case.

Attachment: discount.zip
Description: Zip archive