I have a SIP trace with about 7 active calls. I have identified a problem for one particular call and can see that the RTP streams that are setup for this call are using port 59290 to IP-address1 and 10476 to IP-address2.
I would like to make a display filter for each of these RTP packet streams but this is beyond my capability to figure out do quickly enough (or if it can be done at all).
Any suggestions? Here is the Wireshark display filter page for RTP