[SIPForum-discussion] Getting frame/ethernet header information from a UDP/RTP packet.

[vijay kant gupta]

Hi Badri,

Take dump and use tshark command to fetch details.
tshark -r /home/ftpuser/capture1.cap -T fields -e frame.number -e
frame.time  -e  ip.src -e ip.proto -E separator=, -E quote=d >
/home/ftpuser/capture1csv.

Regard
vijay

On Sat, Mar 16, 2013 at 9:21 AM, Khoa Pham <onmyway133 at gmail.com> wrote:
> Use Wireshark
>
>
> On Fri, Mar 15, 2013 at 9:29 PM, Badri Ranganathan <badri at arcatech.com>
> wrote:
>>
>> Hi all,
>>
>>
>>
>> Does anyone know any system call to fetch Frame header from a RTP packet?
>>
>> A RTP packet consists of the following headers –
>>
>> Frame
>>
>> Ethernet
>>
>> IP
>>
>> UDP
>>
>> RTP
>>
>>
>>
>> However, the frame/Ethernet/ip information are left behind by the kernel(
>> I believe) and when I do a recvfrom, I can see only the RTP data. I wish to
>> capture the ‘time’ from Frame header when the packet arrives.
>>
>>
>>
>> Thanks,
>>
>> Badri.
>>
>>
>> _______________________________________________
>> This is the SIP Forum discussion mailing list
>> TO UNSUBSCRIBE, or edit your delivery options, please visit
>> http://sipforum.org/mailman/listinfo/discussion
>> Post to the list at discussion at sipforum.org
>>
>
>
>
> --
> Khoa Pham
> HCMC University of Science
> Faculty of Information Technology
>
> _______________________________________________
> This is the SIP Forum discussion mailing list
> TO UNSUBSCRIBE, or edit your delivery options, please visit
> http://sipforum.org/mailman/listinfo/discussion
> Post to the list at discussion at sipforum.org
>