Ask Your Question

Can I capture from an IP phone?

asked 2019-05-16 23:31:49 +0000

updated 2019-05-17 05:55:27 +0000

Jaap gravatar image

If I have a PC with Wireshark installed and that PC is connected to an IP phone, then the IP phone connects to a Cisco switch, am I supposed to see both voice and data traffic from the Wireshark capture?

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted

answered 2019-05-17 06:05:16 +0000

Jaap gravatar image

You are not supposed to see the voice traffic. What you actually plugin to on the IP phone is a three port switch, one uplink port to the Cisco switch, one port internal for the IP phone and one for the PC. So the voice traffic directed to the IP phone comes into the uplink port and then stays in the IP phone through the internal port. The other traffic (for your PC) goes out the second external port. When you want to see the voice traffic you need to capture on the uplink port. This usually means inserting another capture switch between the uplink port and the Cisco switch port, or a span port on the Cisco switch.

edit flag offensive delete link more

answered 2019-05-17 02:49:15 +0000

Spooky gravatar image


Most likely no. You'll see the traffic for the PC NIC only.

You would need to capture traffic on the switch to see both voice and data.



edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools


Asked: 2019-05-16 23:31:49 +0000

Seen: 60 times

Last updated: May 17