Ethereal-users: [Ethereal-users] VoIP sniffing

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: <hecvillaf@xxxxxxxxx>
Date: Mon, 13 May 2002 10:05:31 -0700 (PDT)
Hi!

I need to sniff VoIP traffic on a
sort of big network. The tool I have
is Ethereal (in a solaris system).
Since tha traffic is A LOT, I need 
a capture filter to get just that:
VoIP traffic.

I'm kind of new with this, but I've
found that H.323 uses RTP (real time
transport protocol)... but VoIP can
also go on SIP... and that they assign
ports dynamically, so I'm a little
(ok, not so little :) confused here.
What would be the right filter to use
so the system doesn't crash? (it gathered
about 2GB in about 10 minutes!)

I also found a H.323 plugin for
Ethereal at www.voice2sniff.org, but
seems to work only on windows boxes,
am I right? (hope not!)
And is this plugin a display-filter or
just a capture-filter?

Thanks for your help! I really appreciate it,

Hector


__________________________________________________
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com