Using the filter method you can just search for the phone number using something like: sip contains “8005551212:”

Filter for the phone number or invites.

Now you will have the Ports in your packet list panel.Ĭhange the Time Date Format to Your Preference If you want to move the position of the column To change the column Title you double click right on the title text in the grid. Goto Edit | Preferences | User Interface – Columns | Addĭestination Port and Source Port. So you can nicely see RTP ports being used for media you will likely want add Source & Destination port columns in the packet list. Show Source and Destination Ports in Packet List Pane To make sure SIP traffic that is not using port 5060 is detected as SIP goto Edit | Preferences | Protocols | SIP and in “SIP TCP Ports” enter your range of TCP ports.

Making Sure Wireshark Detects All SIP Packets In the case of the “Protocol” just click the + and start typing the protocol you want to jump to. PowerTip: In most lists in Wireshark you can save time and scrolling by typing list value to jump to an entry. If you want to make sure RTP streams are detected as RTP (and not UDP) in Wireshark, goto Edit | Preferences | Protocols | RTP and enable “Try to decode RTP outside of conversations”

Making sure Wireshark Detects RTP Packets We’ll start by getting Wireshark setup to look at Lync traffic, then we’ll find a call. Hopefully this can jump start those who are just starting to use wireshark and maybe give a tip or two to those of us that have been using it for some time.

Wireshark filter sip invite