On Thu, Sep 04, 2003 at 10:00:43PM -0700, Chet Seligman wrote: > I've been looking at RTP also. > I didn't realize that ethereal could identify RTP.
Ethereal can identify RTP *if there are packets in the trace, before the RTP packets, that give it enough information to do so*. It doesn't identify RTP packets *without* any such information. > I thought the user had to identify the ports and then ethereal would find > them - am I wrong? Yes, and no. Yes, if there is no H.245 or RTSP traffic before the RTP traffic to tell Ethereal that IP address XXX/port YYY and IP address ZZZ/port WWW will be exchanging RTP traffic. No, if there is such traffic.
