[SIPForum-discussion] Wireshark and Prepare Filter Option

[Zuñiga, Guillermo]

Hi Fellows
Anyone have a issue like this when tryu Decode a Call?

Regards


De: Zuñiga, Guillermo
Enviado el: jueves, 16 de septiembre de 2010 01:57 a.m.
Para: discussion at sipforum.org
Asunto: Wireshark and Prepare Filter Option

Hi Fellows.
I have the following question:
A.
I am doing a test using codec g711 and I am doing a trace using wireshark.
After I make my traces I get a huge file with all the calls that are through my system, and then
I go to the Tab Optiont statistics-VoIP calls and here I find my test Call and go to the Option
Player->Decode-> and there I can Check the Litle Box with the RTP Packets and then choose Play
and then I can here the Voice.

Like I said before it was using the huge file with all the calls and all the packets that I did in my trace.

B.
My second way to do that is going to
-statistics-VoIP calls
-Find my Test Call.
-Here use the Option "Prepare Filter" and with this just get my Test Call and save to a very small File.
 ---The issue here is when I do that I "Can not"  here the RTP(voice) like when I make with the huge File
without use the Prepare Filter Option.
----When I make the Graph of the test call I can see all the RTP packets, but all said Duration=0(cero).

Why Could this happened? This is a issue with Wireshark, Prepare Filter and Decode Option?

I will appreciate a lot your help.
Regards
Guillermo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://sipforum.org/pipermail/discussion/attachments/20100924/24a80ea3/attachment-0002.html>