Uninformed: Informative Information for the Uninformed

Vol 8» 2007.Sep


Tracking of RTP Streams

In normal operation, RTP establishes two packet streams to form a session between two endpoints. Each endpoint uses one stream to send multimedia data to the other, thus achieving full-duplex communication via two unidirectional packet streams. When identifying an RTP session to be utilized as cover-medium for a full-duplex covert communications channel, the two paired streams must be correctly identified and tracked.