Why wireshark capture RTP when portmirroring? why doesn't WS capture RTP if not in portmirroring??

asked 2019-11-08 13:37:23 +0000

daljaru

updated 2019-11-08 13:40:47 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

Hello, I set simple VoIP testbed.

1 Hub connected with 4 PCs (1 SIP Server, 2 SIP UserAgent, 1 Sniffing Computer)

I installed Wireshark in Server PC and Sniffing Computer.

I did portmirroring between 1 SIP UserAgent and 1 Sniffing Computer.

And I start VoIP Call between UAs.

Wireshark in Sniffing Computer captured RTP, SIP/SDP, UDP packets.

but Server PC did not capture RTP packets but UDP, SIP/SDP.

why did not Server PC capture RTP packet????

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2019-11-08 15:00:12 +0000

Jaap

13730 ●684 ●115

That is because the media stream is setup directly between the UA's, it does not go via the SIP server. That is only there for the signalling, not the media.

edit flag offensive delete link

Comments

Thank you!

daljaru ( 2019-11-08 15:52:41 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2019-11-08 13:37:23 +0000

Seen: 171 times

Last updated: Nov 08 '19

Why wireshark capture RTP when portmirroring? why doesn't WS capture RTP if not in portmirroring?? edit