Packet Trace Filter in Wireshark
Does anyone know if there is a capture filter you can apply in wireshark that will display only SIP packets and not RTP? I apply "ip proto 4" which gives me all encapusalted packets from SBC packet trace, which is a lot of data in some cases. I have tried "port 5060" which gives me nohting, I guess because the packets are encapsulated. I'm trying to get to where I can filter down to only SIP packets with a capture filter, please note I'm not talking about a standard filter on all packets captured. Thanks in advance.