This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Monitor UDP

0

How do I setup wireshark to monitor UDP port 514 from a IP phone?

asked 16 Dec '13, 07:20

tpodlak's gravatar image

tpodlak
1111
accept rate: 0%


One Answer:

0

Assuming the IP phone is connected to a switch, you need to configure a monitor port that will copy all traffic from the port of the IP phone to a port on which you have connected your system with wireshark. Then you can see all traffic from the phone or you can use the capture filter "udp port 514" to only see the syslog data.

If the frames are vlan tagged, then you can use the capture filter "vlan and udp port 514" instead :-)

answered 16 Dec '13, 07:44

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%