RTP identification has been modified to include RTP/RTCP over STUN/TURN (a type of NAT tunneling) and RTP Payload Types in the reserved range 35-63 frequently used by WebRTC.

Identifying these packets as RTP allows VoIP analysis, filtering, etc., in LiveWire captures and forensic searches. LiveFlow already includes support.