cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
152033
Views
57
Helpful
19
Replies

How to save RTP Streams from Wireshark and Play it using an application called Audacity

astanislaus
Level 2
Level 2

I use dto do this regularly a couple of years ago and used to know all the steps to get the RTP streams from Wireshark and then save that into a file and then play it using an application called Audacity.

I think the steps I used to do were:

1. In Wireshark - Setup a display filer   for   displaying   RTP only.

2. Then in Wireshark ----> Under  Statistics  -----> Show All Streams -----> Then Analyze ------> Then save Payload as "raw" or "au" can't remember - forward / reverse / both

3. Then play the saved file using Audacity.

Am I clear in stating what I need.

Now when I do the above I can't play the file with Audacity.

Audacity says:

Audacity did not recognise the type of the file. If it is uncompressed, try importing it using "Import Raw".

One has to keep using these to not forget the steps.

Any help much appreciated.

19 Replies 19

Yurii_Frolov
Level 1
Level 1

what to do if the RTP stream of g.722?

Daniele,

How can one decode SCCP packets in Wireshark?

Please rate all useful posts

"The essence of christianity is not the enthronement but the obliteration of self --William Barclay"

Please rate all useful posts

If your goal is analyze the RTP flow, you can follow these steps:

- right click on one of the UDP packets;

- select "Decode As" from the drop down menu;

w1.PNG

- select "RTP" from protocols list and then click OK;

w2.PNG

- now you can use wireshark built in tools to analyze the flow.

w3.PNG

Let me know if you have a different necessity.

Regards.

ahmer.iqbal
Level 1
Level 1

Dear, 

I am working in a VOIP environment in which huge live traffic is terminating . it is very difficult for me to capture G.729 RTP traces if i tried to captured my system is stuck. Can you please tell me any filter on wireshark through which i can easily capture specific call media RTP traces only.