Wireshark User's Guide 9.11 RTP (RTP Streams, RTP Stream Analysis, RTP Player windows)

Publisher

Wireshark Foundation

URL

https://www.wireshark.org/docs/wsug_html_chunked/ChTelRTP.html

Published

unknown

Updated

unknown

Accessed

2026-09-24

HTTP status

200

License

Wireshark documentation; treat as no-redistribution for corpus purposes; no-redistribution; short excerpts and locators only

Source notes citing this source

• A call whose SDP negotiated sendrecv audio but which has an RTP stream in only one direction at the capture point shows one-way audio at that point; the missing direction was either never sent or lost before reaching the capture point. inferred in context
• RTP Stream Analysis shows per packet the packet number, sequence number, delta to the previous packet, jitter, skew and bandwidth. in context
• The RTP Stream Analysis side panel summarises each stream's maximum delta, jitter, packet count, lost packets calculated from sequence numbers, duration and clock drift. in context
• Some RTP Stream Analysis statistic columns are calculated only when Wireshark can decode the stream's codec. in context
• The RTP Streams Find Reverse function selects forward and reverse stream pairs, or selects single streams that have no reverse counterpart. in context
• The Wireshark RTP Player shows stream waveforms with marks for sequence, jitter-drop and timestamp problems, and can export audio as .au or .wav or the raw payload. in context
• The Wireshark RTP Streams window lists every RTP stream in the capture and lets the user select streams and start analysis tools on them. in context
• The Wireshark User's Guide notes that when the rtp_udp heuristic is active, most streams are shown as just 'RTP <number>' even when a setup frame is in the capture. in context
• RTP Stream Analysis results can be exported as CSV and its graphs saved as PDF, PNG, BMP or JPEG images. in context
• In RTP Stream Analysis the lost-packet count is calculated from RTP sequence numbers, and the stream summary also reports max and mean jitter, skew, clock drift and frequency drift. in context
• Wireshark calculates some RTP Stream Analysis statistic columns only when it can decode the stream's codec. in context
• RTP Stream Analysis in Wireshark shows per-packet delta from the previous packet in milliseconds, jitter, skew, bandwidth, the RTP marker bit, and a status that flags sequence errors and codec changes. in context
• The RTP Streams window has a Find Reverse action (key R) that selects the reverse-direction stream for each selected stream. in context
• When the rtp_udp heuristic is enabled, the RTP Streams window may label streams as 'RTP <number>' even when the setup frames are present in the capture. in context
• The Wireshark guide notes that since 3.2.0 the RTP Player supports any codec with 8000 Hz sampling, and from 3.5.0 supports export of any codec with a user-selectable output rate. in context
• From Wireshark 3.5.0 audio export moved from the RTP Stream Analysis window to the RTP Player window, which saves decoded audio as .au or .wav with one channel per stream. in context
• The RTP Player offers three playback modes: Jitter Buffer (packets outside the buffer are discarded), RTP Timestamp (packets ordered by timestamp) and Uninterrupted Mode (gaps removed). in context
• The Wireshark RTP Player cannot play encrypted SRTP streams. in context
• The Wireshark RTP Streams window lists every RTP stream in the capture with per-stream lost packets, max delta, max jitter and mean jitter, and selected streams can be passed to other tools such as analysis and the player. in context

Cite this source record

APA

WarmTransfer. (2026, September 24). Wireshark User's Guide 9.11 RTP (RTP Streams, RTP Stream Analysis, RTP Player windows). WarmTransfer. https://warmtransfer.net/knowledge/sources/wireshark-wsug-rtp

BibTeX

@misc{warmtransfer-wireshark-wsug-rtp,
  title  = {Wireshark User's Guide 9.11 RTP (RTP Streams, RTP Stream Analysis, RTP Player windows)},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/wireshark-wsug-rtp},
  note   = {Wireshark Foundation, accessed 2026-09-24}
}