
.png)
Prepare Filter will display only the SIP and RTP messages related with the selected call and it is time to get our hand dirty! Go to Telephony > VoIP Calls and select the desired call.įlow Sequence and Play Streams are shown below, and they provide a quick overview of what happened with the call. Now that we know how does a normal call should look, let’s see it how to find all the same pieces using WireShark – For this example I’m using the sip-rtp-g711.pcap file under WireShark SampleCaptures. Most calls involve two streams one for each endpoint allowing bidirectional communication.Ī common SIP call flow between two parties looks something like the image below: Real Time Protocol (RTP) is an application layer protocol used for real-time streaming of audio and video data.

In other words, it helps establishing the who, where and what of the call. Session Initiation Protocol (SIP) is the control protocol.

I lot happens in the background when you pick up a handset and call someone with two leading the party – SIP and RTP.
