This wiki has been migrated to https://gitlab.com/wireshark/wireshark/-/wikis/home and is now deprecated. Please use that site instead.
Differences between revisions 4 and 5
Revision 4 as of 2006-07-23 16:05:42
Size: 2628
Editor: ACBCED83
Comment: Note that example capture file is too big and seems to be corrupted
Revision 5 as of 2008-04-12 17:51:26
Size: 2638
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 4: Line 4:
RTSP is used to set up real-time media streams, e.g. ones using ["RTP"] and ["RTCP"]. RTSP is used to set up real-time media streams, e.g. ones using [[RTP]] and [[RTCP]].
Line 8: Line 8:
RTSP was first specified in [http://www.ietf.org/rfc/rfc2326.txt RFC2326]. RTSP was first specified in [[http://www.ietf.org/rfc/rfc2326.txt|RFC2326]].
Line 12: Line 12:
 * ["TCP"]: Typically, RTSP uses ["TCP"] as its transport protocol. The well known TCP port for RTSP traffic is 554.
 * ["UDP"]: RTSP can also use ["UDP"] as its transport protocol (is this ever done?). The well known UDP port for RTSP traffic is 554.
 * [[TCP]]: Typically, RTSP uses [[TCP]] as its transport protocol. The well known TCP port for RTSP traffic is 554.
 * [[UDP]]: RTSP can also use [[UDP]] as its transport protocol (is this ever done?). The well known UDP port for RTSP traffic is 554.
Line 47: Line 47:
 * attachment:SampleCaptures/RTSP.pcap  * [[attachment:SampleCaptures/RTSP.pcap]]
Line 50: Line 50:
A complete list of RTSP display filter fields can be found in the [http://www.wireshark.org/docs/dfref/r/rtsp.html display filter reference] A complete list of RTSP display filter fields can be found in the [[http://www.wireshark.org/docs/dfref/r/rtsp.html|display filter reference]]
Line 57: Line 57:
You cannot directly filter RTSP protocols while capturing. However, if you know the ["TCP"] port used (see above), you can filter on that one. You cannot directly filter RTSP protocols while capturing. However, if you know the [[TCP]] port used (see above), you can filter on that one.
Line 66: Line 66:
 * [http://www.ietf.org/rfc/rfc2326.txt RFC2326] ''Real Time Streaming Protocol (RTSP)''  * [[http://www.ietf.org/rfc/rfc2326.txt|RFC2326]] ''Real Time Streaming Protocol (RTSP)''

Real-time Streaming Protocol (RTSP)

RTSP is used to set up real-time media streams, e.g. ones using RTP and RTCP.

History

RTSP was first specified in RFC2326.

Protocol dependencies

  • TCP: Typically, RTSP uses TCP as its transport protocol. The well known TCP port for RTSP traffic is 554.

  • UDP: RTSP can also use UDP as its transport protocol (is this ever done?). The well known UDP port for RTSP traffic is 554.

Example traffic

XXX - Add example traffic here (as plain text or Wireshark screenshot).

Wireshark

The RTSP dissector is fully functional over TCP, but currently doesn't handle RTSP-over-UDP.

Preference Settings

There are four preference settings affecting RTSP.

RTSP TCP Port:

This preference specifies the first of the TCP ports on which the RTSP dissector will check for traffic. The default is 554.

Alternate RTSP TCP Port:

This preference specifies the second of the TCP ports on which the RTSP dissector will check for traffic. The default is 8554.

Reassemble RTSP headers spanning multiple TCP segments:

When this preference is enabled, then the RTSP dissector will reassemble the RTSP header if it has been transmitted over more than one TCP segment. Although it is unusual for headers span multiple segments, it's not impossible, and this should be checked if you expect to view the contents of the RTSP conversation.

Reassemble RTSP bodies spanning multiple TCP segments:

When this preference is enabled, then the RTSP dissector will reassemble the RTSP body if it has been transmitted over more than one TCP segment.

Example capture file

This capture file is 8MB in size, and isn't recognised by the current version of Wireshark as being in a valid format...

Display Filter

A complete list of RTSP display filter fields can be found in the display filter reference

  • Show only the RTSP based traffic:

     rtsp 

Capture Filter

You cannot directly filter RTSP protocols while capturing. However, if you know the TCP port used (see above), you can filter on that one.

  • Capture RTSP traffic over the default port (554):

     tcp port 554 

    Capture RTSP traffic over the alternate port (8554):

    tcp port 8554 

  • RFC2326 Real Time Streaming Protocol (RTSP)

Discussion

RTSP (last edited 2019-09-03 08:13:06 by GuyHarris)