After you captured the audio stream using Wireshark, you want to playback the RTP stream. Unfortunately, Wireshark can only decode G711 streams but the stream that you captured is G729. Follow the steps below to playback G729 streams
1- Open the capture in Wireshark,
2- If you do not see the RTP packets (G729) , you might need to select the UDP packets -> right click and select Decode As… -> RTP (in the scrolling menu)
3- The rtp packets should now show up as G729.
4- Go to ”Statistics -> RTP -> Show All Streams”. Select the desired stream and press “Analyze”.
5- Select ”Save Payload…”. Save options are Format = .raw and Channel = forward. Name file sample.raw. The file should now be saved on your PC in RAW format.