VoIP Monitor And Multiple RTP Streams
Hello.
Is someone here using VoIPmonitor?
I am using just the sniffer and I found some pcap files that contain some odd streams.
For example, I have a file with 3 streams, but the weird stuff is that 2
streams are the same (e.g., have the same source address and port and same destination address and port).
Example:
“Source Address”,”Source Port”,”Destination Address”,”Destination Port”,”SSRC”,”Payload”,”Packets”,”Lost”,”Max Delta (ms)”,”Max Jitter”,”Mean Jitter”,”Status”
“6X.XXX.XXX.XXX”,34170,”1XX.XXX.XXX.XXX”,10602,277011456,”g711A”,7289,0,21.
303999999996449,21.265543809819981,0.073286945955809715,””
“1XX.XXX.XXX.XXX”,10602,”6X.XXX.XXX.XXX”,34170,2020146713,”g711A”,2099,0,36.
296999999998661,2.9025967411766738,0.97877393850963945,””
“1XX.XXX.XXX.XXX”,10602,”6X.XXX.XXX.XXX”,34170,325951803,”g711A”,4949,0,41.
879000000000815,4.5846492231155924,1.0537488536922062,””
The only thing that I could notice is that the first packet that had the new SSRC (325951803) has the marker bit on, but I could not find a reason for the SSRC change.
Any ideas of what could be causing that?
Thanks.
Regards,
Marcelo H. Terres
IM: mhterres@jabber.mundoopensource.com.br https://www.mundoopensource.com.br https://twitter.com/mhterres https://linkedin.com/in/marceloterres
3 thoughts on - VoIP Monitor And Multiple RTP Streams
Marcelo,
You need to look at the box changing the SSRC and figure out why it’s changing it. Where are you seeing the multiple rows in MySQL or wireshark?
Hello Dovid.
I tried to figure it out, but to be honest I could not find a reason for the change.
The lines that I sent are the RTP streams detected by Wireshark.
Regards,
Marcelo H. Terres
IM: mhterres@jabber.mundoopensource.com.br https://www.mundoopensource.com.br https://twitter.com/mhterres https://linkedin.com/in/marceloterres
Must be something in Asterisk. I have seen it in the past and was never able to figure it out.