
**-N NUM**: Max number of packets buffered within dumpcap.There are a couple of dumpcap (not tshark) flags that can be used to limit resource usage. n=1).įor normal traffic loads, the choice of using tshark vs dumpcap should depend on which flags you want to use. Under high loads, there is some evidence that tshark drops more packets than dumpcap however, these resultsĪre taken from a single machine (i.e.

Tshark has most of the same flags that dumpcap has because tshark calls dumpcap for much of its capture functionality. Unlike Wireshark and tshark, dumpcap cannot see non-physical interfaces like extcap interfaces. Quicklinks: manpage | Wireshark Docs | codeĭumpcap is the part of the wireshark suite that captures packets. This capture was given to me by a customer.Īny other suggestions – much appreciated Daniele.2 min | Ross Jacobs | JanuTable of Contents

So my guess is that this capture is neither A-Law or u-Law codec - right. When I played the imported information I get all noise (like heavy metallic sound) and no voice. Opened Audacity and imported the file as raw and specified FIRST the A-Law codec for G.711A and selected 8000hz and that didn’t work and SECOND tried the u-Law coding for G.711u and selected the sample frequency again equal to 8000 Hz and that didn't work. In Wireshark -> Under Statistics -> I Selected Stream Analysis (Did not select Show All Streams – not sure what the difference is) then -> Save Payload -> Select “au” instead of raw and it says – “Can’t save in a file:saving in au format supported only for alaw / ulaw stream Same when I select the reverse stream from IP2 to IP1 and play. Then I select the forward stream (From IP1 to IP2) and click on play and I don’t hear anything at all. So I select that call and click on Player button and then click on Decode button. (I don’t see VoIP calls under Telephony –> may be a different version of Wireshark).Īnyway, there is only one call because the Wireshark had a Capture Filter to track information between one source and one destination IP address.


In Wireshark -> Under Statistics ->I have VoIP calls. This is my current situation with 3 your suggestions:
