Wireshark · Wireshark-users: Re: [Wireshark-users] Monitoring traffic from a VOIP phone

["Tom Heyligen" <T.Heyligen@xxxxxxxxxx>]

Hi Tim,

If I understand you correctly, your setup is like:
  PC -- VoIP phone -- router -- modem -- internet
where the VoIP phone contains an integrated two-port Ethernet switch.

One way would be to extend your setup with a hub, like:
  PC -- VoIP phone -- router -- hub -- modem -- internet

Make sure the hub is an authentic hub, forwarding all packets to all
ports. Avoid a switch.
Connect 3 ports to this hub:
- the WAN Ethernet port of the router
- the Ethernet port of the modem
- the LAN Ethernet port of a PC (running Wireshark)

Wireshark should sniff all traffic between your LAN and the Internet, so
you might want to filter on IP address(es) or VoIP protocol (e.g. sip).

Happy sniffing,
 Tom.

________________________________________
From: wireshark-users-bounces@xxxxxxxxxxxxx
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Tim Gaunt
Sent: dinsdag 22 januari 2008 12:09
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Monitoring traffic from a VOIP phone

Hi,

I'm currently trying to diagnose an issue with a VOIP phone and someone
suggested I snif the traffic -and suggested wireshark.

I've had a look around and was wondering if anyone could point me in the
right direction. I connect to a router through the phone and the phone
connects directly to the router (a Belkin N1), is there anyway I can
monitor the traffic to/from the VOIP provider?

TIA

Tim