I am analyzing the traffic of a VOIP application. I started up wireshark, and made sure no other application was using internet, and then had a a voice call on the application. Wireshark captured some nice UDP packets for me. I did that three times for voice and three times for video. Now I want to analyze the traffic, that is, find out what kind of traffic is there, or whether there are any application specific patterns etc.
I did read up on google to right click on a packet and select decode as -> RTP - but then I don't see any RTP header or payload, all I see is Version: Version draft 1 in under the RTP heading.
Any help or guidance in this regard is appreciated.
BTW - I am reading RFCs and what now, but still can't figure out how to analyse traffic and figure out whether RTP is there or not, and if it is, whether the media is transferred using just this, or something else too?