Networking/Computing Tips/Tricks

Rate this content:
5 of 5 - 1 votes
Thank you for rating this article.

Hi everyone!  Happy Thanksgiving 2021. 

Just released - Wireshark 3.6.0!!!  Why is this important to me, you, and everyone who troubleshoots Voice traffic using Wireshark?  Well, there are many changes to the voice related functionality in Wireshark in this (actually as part of the 3.5.0) release.  Of course, more than VoIP was updated in these last couple of releases, and I do not discuss other changes here.  I would refer you to the Wireshark web site for details. 

Let me just say, up front, that this is perhaps the biggest update to the Telephony menu items and Voice related functionality in many years.  Mostly the changes are related to RTP and the RTP Player.  I have documented the Voice changes here, and discussed some examples.

If you want to learn more about troubleshooting voice over IP using Wireshark, check out my YouTube video here: and enroll in one of our classes here: 

Wireshark now supports dissecting RTP packets with OPUS payloads. I have left this alone - it is here as an FYI.

The RTP Player has been significantly redesigned and improved.  See Playing VoIP Calls and RTP Player Window in the Wireshark User’s Guide for more details (the links will open new tabs).  Here is a synopsis of what has changed:

  • The RTP Player is now accessible from the Telephony › RTP › RTP Player menu.
    2021 11 24 17 08 07

  • The RTP Player can play many streams in row.  This is done with "playlists".  The RTP Player maintains playlist and other tools can add and remove streams to and from it:
    2021 11 24 17 05 45
  • The UI is more responsive.
  • Every stream can be muted or routed to the left or right channel for replay.
  • The option to save audio has been moved from the RTP Analysis dialog to the RTP Player. The RTP Player also saves what was played, and it can save in multichannel .au or .wav.

The VoIP dialogs (VoIP Calls, RTP Streams, RTP Analysis, RTP Player, SIP Flows) are non-modal and can stay opened when they are in background.  This is very handy when troubleshooting, as prior to this, you had to close one of the tools to open another in the Telephony part of Wireshark.

The same tools are provided across all dialogs (Prepare Filter, Analyze, RTP Player …​).  This standardizes the look and feel when using voice.

The “Follow Stream” dialog is now able to follow SIP calls based on their Call-ID value.
2021 11 24 17 13 39

The “RTP Stream Analysis” dialog CSV export format was slightly changed. The first line of the export contains column titles as in other CSV exports.
2021 11 24 17 16 06

Here is an example exported CSV file:
2021 11 24 17 18 41

The “RTP Stream Analysis” and “IAX2 Stream Analysis” dialogs now show correct calculation mean jitter calculations.
2021 11 24 17 21 09

RTP streams are now created based on Skinny protocol messages in addition to other types of messages.  Furthermore, the “VoIP Calls Flow Sequence” window shows more information about various Skinny messages.

All of this is great news for those of us who troubleshoot Voice over IP issues.  

And don't forget to Capture Every Day!

Capture Every Day

Add comment


Did you learn something?
Did I save you time? 

Buy me a coffeeBuy me a coffee!

Find by Tag

5G Networks 6LoWLAN 6LoWPAN 802.11 802.11ah 802.11ax 802.11ay 802.11az ACL Addressing Analysis Ansible Architecture ARP Assessment AToM Backup Bandwidth BGP Biography Bloom's Taxonomy Briefings CBRS CellStream Cellular Central Office Cheat Sheet Chrome Cisco Clock Cloud Computer Consulting CPI Data Center Data Networking Decryption DHCPv4 DHCPv6 Display Filter DNS Documentation ECMP EIGRP Ethernet Ethics Flipping the Certification Model Follow Me Fragmentation Git GNS3 Google GQUIC Hands-On History Home Network HTTPS ICMP ICMPv6 IEEE 802.11p IEEE 802.15.4 In A Day Internet IOS Classic IoT IPv4 IPv6 L2 Switch L2VPN L3VPN LDP Learning Services Linux LLN Logging LoL M-BGP MAC MAC OSx Macro Microsoft mininet Monitoring Monitor Mode MPLS Multicast Name Resolution Netflow NetMon netsh Networking Network Science nmap Npcap nslookup Online Learning Online School OpenFlow OSPF OSPFv2 OSPFv3 OSX Parrot PIM Ping Policy POTS POTS to Pipes PPP Profile Profiles Programming Project Management Python QoS QUIC Requirements RIP Routing RPL RSVP Rural SAS SDN Security Self Certification Service Provider Services Sharepoint Small Business Smartport SONET Speed SSH SSL Subnetting T-Shark TCP TCP/IP Telco Telecom 101 Telecommunications Telephone Telnet Terminal TLS Tools Traceroute Traffic Analysis Traffic Engineering Training Travel Tunnel Utility Video Virtualbox Virtualization Voice VoIP VRF VXLAN Webex Wi-Fi Wi-Fi 4 Wi-Fi 5 Wi-Fi 6 Wi-Fi 6/6E Windows Wireless Wireless 5G Wireshark Wireshark Tip WLAN ZigBee Zoom

Twitter Feed