
Then click “New Capture” & click the “Capture Settings”. In my windows7 machine I have installed this & here are the instructions to get a wireless sniffing done using this tool.Once you open the application select wireless interface card under the select network section as highlighted below.

Supported operating systems: Windows 7, Windows Server 2003 Service Pack 2, Windows Server 2003 Service Pack 2 圆4 Edition, Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 R2 for Itanium-based Systems, Windows Vista 64-bit Editions Service Pack 1, Windows Vista Service Pack 1, Windows XP 64-bit, Windows XP Service Pack 3 You can download this tool freely from Microsoft.( ).Operating System requirement is as below. Microsoft has developed a capturing tool called “Microsoft Network Monitor” which can be used to capture the wireless traffic over the air. But there is a free tool you can use in Windows operating system. Normally you require separate wireless adapter to do this sort of work. You can then press play to listen to the audio in wireshark.If you try to capture wireless traffic by selecting wireless interface on wireshark, it will not accurately capture the wireless packets over the air. Right handside window you click “Play streams” The window on the left then pops up. This takes long time on large PCAP files Progress barīelow is what pops up. You wil see the progress bar at the bottom filling up. In the window that pops up choose the new line “current” field and change from “none” to “RTP” Change to RTP

Right click on any line in the trace and choose “decode as…” Right click, then choose “Decods as…” Wireshark will then only display UDP packets for that stream In the filter type “UDP.stream = 0” Filter fro UDP.Stream Zero I decode the UDP streams as RTP and then use the “RTP analyser” to play back and then export the audio as an “AU” file.

The way i have been listening to these calls is by using the option in Wireshark to “decode as…” I am not saying its the best way or the quickest way. You have narrowed it down to the relevant time period by following this post and you want to listen to the audio.īut if it’s not a SIP call, this is not so easy as choosing “Telephoney/VOIP calls”. It needs updating which i will do hopefully soon. If you dont know how to capture a wireshark trace from an MBG take alook at this post.

So you have your self a wireshark trace of a call with audio issues
