Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 114
  • Last Modified:

software that will record packets comming in a network connection

I need to record to a wav file phone calls between two ip phones.
I have mirrored a port on my switch to bring the phone traffic in to a server.
how do hear what the phone calls are.
I can see that there are packets using wireshark, but  I need to prove that both sides of the
conversation are coming into the nic card.
0
javagair
Asked:
javagair
  • 4
  • 4
  • 2
4 Solutions
 
José MéndezCommented:
Now if you have a packet capture already, just filter the packets displayed by applying this filter

rtp and (ip.addr == 1.1.1.1 or ip.addr == 2.2.2.2)

THis will filter all RTP packets sent/received by 1.1.1.1 and 2.2.2.2, you must replace with the IPs of the phones in question.

WHat brand are those phones?
0
 
Kamran ArshadCommented:
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
javagairAuthor Commented:
these are Avaya phones
wireshark says in their faq section that there is no way to separate out just the phone call
which is why I was wondering what I would use to listen on the network line
the company we pay to record calls only picks up our employee and not the caller.
will play the suggested tutorials
0
 
José MéndezCommented:
Could you please show me the Wireshark FAQs? I use Wireshark all day long to separate voip calls.
0
 
javagairAuthor Commented:
just saw a answer in wireshark when I was doing web search, didn't save link will have to search again to find it.
0
 
javagairAuthor Commented:
messages are coming in as udp, switched them to rtp, instructions say to go to player, but I can not find player in any menu.
have the latest wireshark download, but can't find player anywhere.

thanks

gary
0
 
José MéndezCommented:
Go under Telephony > RTP > Statistics > Show all streams > choose the stream based on the IPs involved, then click on Analyze
0
 
javagairAuthor Commented:
yesterday all my traffic was in udp, I told it to convert to rtp
then all my traffic was in rtp
this morning I start wire shark, traffic is h.225.0and tcp
I do not see how to get back to rtp, since I didn't do anything.
so now I have no rtp traffic to look at.
gary
0
 
José MéndezCommented:
h.225 carries the signaling information required to set up a call (calling, called numbers, state of the call, etc).

Firts throw in a filter like

udp and (ip.addr == 1.1.1.1 or ip.addr == 2.2.2.2)

THis will filter all RTP packets sent/received by 1.1.1.1 and 2.2.2.2, you must replace with the IPs of the phones in question.

Then you will get a bunch of packets in udp that should contain the conversation. Righ click on one of those and choose to Decode As == RTP
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 4
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now