You can also right click on the UDP packet and go to "Decode As" and select RTP in the window that pops up. Wireshark will then tell you what all the fields in the RTP packet mean, including payload type (where you'll find 711 vs 729, etc)<br>
<br>As Sean mentioned, it'll also display in the summary line in the top pane.<br><br><div class="gmail_quote">On Wed, Oct 22, 2008 at 8:14 AM, Sean Walberg <span dir="ltr"><<a href="mailto:sean@ertw.com">sean@ertw.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Sure, if Wireshark sees the packet as RTP packets it'll display that in the info column, or in the packet details. For example:<br>
<br>Payload type: ITU-T G.711 PCMU (0)<br><br>If Wireshark is not seeing the packets as RTP, go to Edit->Preferences, Protocols->RTP, and make sure "Try to decode RTP outside of conversations" is checked.<br>
<br>Sean<div><div></div><div class="Wj3C7c"><br><br><br><div class="gmail_quote">On Wed, Oct 22, 2008 at 4:21 AM, Lemon <span dir="ltr"><<a href="mailto:lemon@lemon.za.net" target="_blank">lemon@lemon.za.net</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
i know it is a bit off topic but is there a way to use wireshark to<br>
tell if the voip call is G711 ulaw or alaw?<br>
</blockquote></div><br clear="all"><br></div></div><font color="#888888">-- <br>Sean Walberg <<a href="mailto:sean@ertw.com" target="_blank">sean@ertw.com</a>> <a href="http://ertw.com/" target="_blank">http://ertw.com/</a><br>
</font><br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br>