How to analyze the Network Traffic Using wireshark

Posted on 2011-05-11
Last Modified: 2012-05-11

I have wireshark Installed on my windows 2003 server.I have voip softswitch on my windows2003 server.
I have  voip ATA's(voip phones) installed at couple of customer locations.Since yesterday,I ses that some of my clients are not able to register with my server,but others are able to register ,though they are using the same ISP.This happens only in one country and in other country ,it just works without any issue.I need to analyze whats happening and where its getting lost.

I am very new to wireshark.Please help.I have the customer ip's which are able to register,also i have customer ip's which are not able to register.

Question by:Sam2009
    LVL 8

    Expert Comment

    Hello Sam2009,

    I hope following article will help you understand the issue.

    Good Luck!

    Author Comment

    Hello myramu,

    This example is useful for calls hitting the voip softswitch.My issue is before calls hitting.My unit doesnt register,so wont be able to make calls.


    Author Comment

    @ myramu

    I need to add voip also to the zone list ,how do i do it now
    LVL 28

    Accepted Solution

    Without going deep in depth to the VoIP protocols, there is an easier way. First, determine the IP address of a working system. Create a capture filter in WS of "host xx.xx.xx.xx" with the IP address. Then, connect up the phone and stop the capture when done.

    Then, do the same thing with a nonworking phone. Go line by line through the two traces side by side looking for discrepancies.

    Notw that some traffic may not be making it past a firewall on the client side. You may need to set up WS on the side of each client as a second comparison point.
    LVL 39

    Expert Comment

    Calls hitting your voipswitch are different from registers... But that is content.
    Both are part of the SIP protocol. If you are missing any SIP packets then that is the first clue...

    So if you have a SIP recording from restarting an ATA it should show a setup using SIP...
    If there is no SIP then a call may not happen.

    LVL 15

    Assisted Solution

    If the ata uses sip then you will see data on port 5060 udp ( so long as its on default settings)
    set wireshark to capture data and run a filter to see if there is anything.
    If there is no data i would suggest checking  your config and if that fails setting up a vpn tunnel between the two sites as it looks like the isp is blocking the voip traffic.


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
    Outsource Your Fax Infrastructure to the Cloud (And come out looking like an IT Hero!) Relative to the many demands on today’s IT teams, spending capital, time and resources to maintain physical fax servers and infrastructure is not a high priority.
    Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now