First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

RTP Packet Lost

  • retag add tags

I cant understand the issue here, we first found the cause of this issue that the firewall was inspecting RSTP traffic and some how sometimes blocking it. but after remove the inspection policies from the firewall it worked fine.

Now the same issue happen again (some how still considered differently) and some cameras out of 4000 cameras, showing delay in the stream, or break in the record. the capture showing me this "previous segment not captured (common at capture start)" this is has many reasons: it might be wireshark could not capture or wire issue. how to figure out the cause. Thanks

Please excuse my language.

anas.awad's avatar
1
anas.awad
asked 2019-04-15 11:23:35 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Hi Anas,

I've answered a similar question about previous segment not being captured.

TCP segment not capture may be normal if they are seen at the beginning of a capture or at least if you started capturing packets after the TCP conversation had begun. It can also mean there are dropped packets either on the network or on the capture device. Check Statistics -> Capture File Properties (CTRL+ALT+SHIFT+C) to see if there were drops. (The capture device may not support populating that field.)

To me it looks like you are seeing the effect of packet loss.

Is the signalling or the camera feeds that are lost?

You mention RTSP and cameras so do you mean Real Time Streaming Protocol because to me RSTP is Rapid Spanning Tree Protocol?

RTSP over TCP would make sense for seeing segments not capture.

Your subject line, however, reads RTP so is it Real-time Transport Protocol but over TCP? I'm used to seeing it over UDP myself.

If you capture on the firewall, try to capture on the ingress and egress interfaces to verify the firewall is not dropping the packets.

Look at interfaces counters on the path the traffic takes.

Hope this helps.

Cheers,

JF

(If this answer helps, vote on it to help others.)

Spooky's avatar
191
Spooky
answered 2019-04-16 17:53:24 +0000
edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer