First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

SIP traffic missing

  • retag add tags

I have mirrored the port that the phone is on. I have a new installation of Wireshark with default configuration. I am able to create a capture file while I am receiving and and making phone calls. When completed, I do not have any SIP traffic in the file. Is this a Wireshark configuration setting or more of a switch/phone issue? The calls are successful.

netguy28655's avatar
1
netguy28655
asked 2021-10-22 19:14:25 +0000
edit flag offensive 0 remove flag close merge delete

Comments

The default port for SIP is 5060. Can you verify if the capture has either UDP port 5060 or TCP port 5060 packets?

BigFatCat's avatar BigFatCat (2021-10-23 08:16:40 +0000) edit
add a comment see more comments

1 Answer

0

Wireshark shows SIP traffic right out of the box, so this would likely be an issue with the way capture is setup. Either the switch mirror configuration, VLAN tagging, etc.

Jaap's avatar
13.7k
Jaap
answered 2021-10-23 05:38:46 +0000
edit flag offensive 0 remove flag delete link

Comments

The traffic may be encrypted.

Anders's avatar Anders (2021-10-23 21:27:54 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer