Thursday, May 8, 2008

rtpbreak: reconstructing RTP sessions.

Hi folks, just a  fast post to point out rtpbreak.

With rtpbreak you can detect, reconstruct and analyze any RTP session. It doesn't require the presence of RTCP packets and works independently form the used signaling protocol (SIP, H.323, SCCP, ...). The input is a sequence of packets, the output is a set of files you can use as input for other tools (wireshark/tshark, sox, grep/awk/cut/cat/sed, ...). It supports also wireless (AP_DLT_IEEE802_11) networks. This is a list of scenarios where rtpbreak is a good choice:
reconstruct any RTP stream with an unknown or unsupported signaling protocol
reconstruct any RTP stream in wireless networks, while doing channel hopping (VoIP activity detector)
reconstruct and decode any RTP stream in batch mode (with sox, asterisk, ...)
reconstruct any already existing RTP stream
reorder the packets of any RTP stream for later analysis (with tshark, wireshark, ...)
build a tiny wireless VoIP tapping system in a single chip Linux unit
build a complete VoIP tapping system (rtpbreak would be just the RTP dissector module!)
This project is released under license GPL version 2.

You'll find it here. To me, it's a very nice tool fast and easy to use. Good work Michele !


xenion said...

thanks :>

Anonymous said...

After i sox the raw files as the example, i get the wav files. But when i play the wav files, i hear only noise. what’s the matter?