See only a Sampling of RTP frames in a Wireshark Packet Capture
Posted
by 
Mark Lindsey
Mark Lindsey
Question: How do you make a display filter that filters out most RTP frames, but leaves a representative sample? Sometimes it's convenient to see a sampling of RTP frames in Wireshark, without having to see 50 per second. Answer: Rather then see 50 frames per second for every RTP flow, how about one frame every 5 seconds? Wireshark display filter: rtp[3:1]==0 or rtp.marker==1 Shows an RTP pa...