how to view document captured in wireshark pcap file

From a terminal run the command videosnarf -i YOUR_CAPTURE_NAME.Begin a call, and after you are satisfied end the call and stop Wireshark.In my case I have configured a SPAN port to mirror the traffic on a Cisco C40 endpoint to the port of my physical host machines interface) This physical port should be receiving the traffic being sent to and from the target Videoconferencing device. Select the interface most likely eth0 (make sure your VM is bridged to the LAN connection on the host machine.Sudo dpkg -i ~/Downloads/videosnarf_0.63-1_bĪt this point the VM is now ready to capture and decode the pcap files RTP streams into a watchable output: Log out and then back in Download and install the 32-bit version of videosnarf which is available here: Sudo usermod -a -G wireshark YOUR_USERNAME Sudo apt-get install libnet1 libnet1-dev libpcap0.8-dev wireshark mplayerĬonfigure the system so non-root users can run wireshark Tar -zxvf /media/jason/VMWare Tools/VMwareTools-9.6. -C ~/Desktop/

Then use the following commands (path may vary) This will attach the disk image to the Ubuntu Machine. After login at the first boot after the install, the VMWare tools from Virtual Machine > Install VMWare tools (noting I am running this on a MAC so the location may vary).For the purposes of this post, I simply followed the default options of the Ubuntu install process.Download the 32-bit version of Ubuntu Desktop from.To build the Ubuntu Virtual Machine do the following: Videosnarf - to decode the RTP streams from the packet capture.Wireshark - to perform the packet capture.To do this I built an Ubuntu Virtual Machine, and utilised:

In this article, I document the steps I used to capture a live H.264 video conferencing call and then replay it for viewing.

How to view document captured in wireshark pcap file