0

I received a pcap dump from a site, running Cisco JTAPI, who's VOIP traffic I need to analyse. I use Wireshark's VOIP calls analyser via the menu:

enter image description here

The conversations display fine in Wireshark v1.10.8, but when I upgraded to Wireshark v2.0.0, no conversations are shown for the same pcap file.

Is there a bug in WS 2.0.0? Or am I the bug? (as usual xD)

PS: I unfortunately cannot share the pcap file as it is sensitive client data.

0

If the capture have not started before the VoIP session then wireshark will not detect it. Workaround: select the "Try to decode RTP outside of conversations" (from Preferences -> Protocols -> RTP)

  • Not relevant as the calls are showing correctly in the older version of Wireshark. – DavidPostill Apr 1 '16 at 10:54

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.