Wireshark · Display Filter Reference: RTPDump file format

Field name	Description	Type	Versions
rtpdump.address.match	Text and binary addresses and ports match -- file likely generated by rtpdump	Label	4.2.0 to 4.4.2
rtpdump.address.mismatch	Text and binary addresses and ports do not match -- file likely generated by wireshark	Label	4.2.0 to 4.4.2
rtpdump.bin_addr	Binary IPv4 address	IPv4 address	4.2.0 to 4.4.2
rtpdump.bin_addr.ipv6	Binary IPv4 address may be a truncated IPv6 address	Label	4.2.0 to 4.4.2
rtpdump.bin_port	Binary port	Unsigned integer (16 bits)	4.2.0 to 4.4.2
rtpdump.binary_header	Binary header	Byte sequence	4.2.0 to 4.4.2
rtpdump.packet	Packet	Byte sequence	4.2.0 to 4.4.2
rtpdump.padding	Padding	Byte sequence	4.2.0 to 4.4.2
rtpdump.pkt_data	Data	Byte sequence	4.2.0 to 4.4.2
rtpdump.pkt_len	Packet length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
rtpdump.pkt_offset	Time offset (milliseconds)	Unsigned integer (32 bits)	4.2.0 to 4.4.2
rtpdump.pkt_plen	Data length	Unsigned integer (16 bits)	4.2.0 to 4.4.2
rtpdump.pkt_plen.truncated	Data was truncated during capture	Label	4.2.0 to 4.4.2
rtpdump.play_program	Play program	Character string	4.2.0 to 4.4.2
rtpdump.play_program.unknown	Playback program not the expected 'rtpplay', dissection may be incorrect	Label	4.2.0 to 4.4.2
rtpdump.text_header	Text header	Character string	4.2.0 to 4.4.2
rtpdump.ts	Start time	Date and time	4.2.0 to 4.4.2
rtpdump.ts.sec	Start time (seconds)	Unsigned integer (32 bits)	4.2.0 to 4.4.2
rtpdump.ts_usec	Start time (microseconds)	Unsigned integer (32 bits)	4.2.0 to 4.4.2
rtpdump.txt_addr	Text IPv4 address	IPv4 address	4.2.0 to 4.4.2
rtpdump.txt_addr.bad	Unparseable text address	Label	4.2.0 to 4.4.2
rtpdump.txt_port	Text port	Unsigned integer (16 bits)	4.2.0 to 4.4.2
rtpdump.txt_port.bad	Unparseable text port	Label	4.2.0 to 4.4.2
rtpdump.version	File format version	Character string	4.2.0 to 4.4.2
rtpdump.version.unknown	Version not recognized, dissection may be incorrect	Label	4.2.0 to 4.4.2