How to Identify SRTP Protocol on Wireshark
Secure Real-time Transport Protocol (SRTP) is an extension of the Real-time Transport Protocol (RTP) that provides a standardized way to send audio and video packets over Internet Protocol (IP) networks. SRTP acts as a wrapper and encrypts the SRTP protocol to hide the information from monitors. Using the packet sniffer Wireshark, systems administrators can quickly identify RTP and SRTP streams. Wireshark enables administrators to view passing packets in real time on their network for data aggregation and troubleshooting.
Other People Are Reading
Instructions
-
-
1
Launch Wireshark on the device you are going to use for monitoring. Click "Show the Capture Options" in the Wireshark toolbar.
-
2
Select the network interface you want to monitor from the "Interface" drop-down list, then click the "Start" button.
-
-
3
Click the "Expression" button in the toolbar. Scroll down the "Field" section to the "RTP" field.
-
4
Click "RTP" to select filtering, click "Is Present" under the "Relation" column, then click "OK" to add the filtering rule. Now only RTP and SRTP packets will be monitored.
-
1
