| In the interface of the Wireshark, go to the
capture option. Select the correct interface option, which represents the
desired network to be sniffed. Now, start capturing packets.
Once done with the capturing of packets, in the pop up
window you will be able to see all packets captured for each protocol. After
a while, stop packet capturing and in the Main window you can see all the
details of each packet captured. The details include IP address, destination
IP address, type of protocol used and information present in the packet
header. Now to analyze data, from the Analyze option, select Expert info.
This will list packets according to the security filters, i.e., errors,
warnings, notes and chats. You can also specify the type of packets you want
to filter, like errors only, errors and warnings etc. Select on any packet
to check its detail in the Main window. You can notice the hexadecimal codes
dump of the packets, as well as, details about the source ports, destination
ports, MAC addresses of the packets etc.

Captured RTP Streams of a voice
conversation
If you want to view the summary of any packet, which has
information like protocol hierarchy, details of conversation which took
place at the time of the capture, the IO graphs etc, you can go to the
Statistics tab to get all of these. If you have captured a VOIP
conversation, then you can go to the RTP option and select Show all streams.
In the pop-up window, you will notice all the streams of the conversation
and you can select the one which you want to hear.

Graphical analysis of VoIP Streams
To analyze the stream, choose Payload option and save the
file in .au format. Once this is done, you can hear one side of the
conversation, to hear the other part of the conversation, repeat the same
steps with the other stream. |