Ask Your Question

How to capture SIP and RTP traffic

asked 2018-10-08 20:37:25 +0000

this post is marked as community wiki

This post is a wiki. Anyone with karma >750 is welcome to improve it.

Looking to capture SIP and RTP traffic on network. When I start the program and check the protocols that are being captured I do not ever see either of those listed. I try filtering and that does nothing either. I am new to this, any help would be greatly appreciated!

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2018-10-09 04:16:49 +0000

felixbkk gravatar image

My general suggestion is to get closer to the source of the traffic and follow it from there. In this case, it sounds like you are trying to capture phone traffic. I would recommend that you set up a port mirror that copies the traffic coming to and from the port the phone is connected. Once you've got that running, start a phone call, speak a few words then hang up. In Wireshark filter for the IP address of the phone to see if you captured any data. I wouldn't rely on filtering by protocol when first getting started as many times you will exclude data that you don't realize you need - start with the IP.

Once you find the traffic you're looking for on the switch port mirror then you'll need to see where that data goes from there to find where it gets lost.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2018-10-08 20:37:25 +0000

Seen: 2,131 times

Last updated: Oct 09 '18