Wireshark recognises RTP streams from VoIP signaling such as SDP in SIP; when the signaling is not in the capture, RTP must be decoded manually with Decode As or by enabling the rtp_udp heuristic dissector.
Checked 2026-09-24
Wireshark can only recognize RTP streams based on VoIP signaling, e.g., based on SDP messages in SIP signaling.
- Vendor
- Wireshark Foundation
- Product
- Wireshark
- Subsystem
- RTP dissection
- Deployment
- on-premises
- Region
- not restricted
- Release range
- current as of 2026-09-24
- Checked
- 2026-09-24
Sources
- Wireshark User's Guide 9.2 Playing VoIP Calls — Wireshark Foundation · tier 2 current vendor documentation · 9.2 Playing VoIP Calls, paragraph on recognising RTP streams
Cite this note
APA
WarmTransfer. (2026, September 24). SIP capture and analysis with Wireshark and sngrep and HOMER: source note sip-capture-analysis-ws-rtp-needs-signaling. WarmTransfer. https://warmtransfer.net/knowledge/claims/sip-capture-analysis-ws-rtp-needs-signaling
BibTeX
@misc{warmtransfer-claim-sip-capture-analysis-ws-rtp-needs-signaling,
title = {SIP capture and analysis with Wireshark and sngrep and HOMER: source note sip-capture-analysis-ws-rtp-needs-signaling},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/sip-capture-analysis-ws-rtp-needs-signaling},
note = {Source note sip-capture-analysis-ws-rtp-needs-signaling, checked 2026-09-24}
}