Dump audio source from wireshark

content

• • Goals
  • Environment
  • steps
  • • [RTP package capture](#RTP package capture)
    • [Wireshark play audio](#Wireshark play audio)
    • • [Extract audio source](#Extract audio source)
    • [Play and Analyze](#Play and Analyze)
  • Reference

Goals

Dump & Play alaw pcm, mulaw pcm audio source from RTP Package

Environment

name	version
wireshark	Version 3.4.2 (v3.4.2-0-ga889cf1b1bf9) on windows 64 bit
Audacity	Audacity 2.4.2 on Windows 64 bit

*need audio codec .dll plugin

steps

RTP package capture

1. Input filter: ip.src_host == && tcp

2. start capture for duration

3. press Protocol > decode as

4. hen you can see G.711 Alaw audio

Wireshark play audio

Extract audio source

1. press Telephony > RTP > RTP streams >select g711A stream > Analyze

2. save: press Save > Unsynchronized Forward stream Audio > save as .raw

   will like jpegAudio.raw

3. play in wireshark

   3.1 press Play Streams

   3.2 Wireshark audio page
   

Play and Analyze

Import 原始資料 > open .raw in Audacity

import config

play in Audacity

Reference

wireshark 抓取RTP，播放/存檔語音碼流