06-14-2012 06:08 AM - edited 03-16-2019 11:40 AM
I would like to know what have not turn on in Wireshark. When I try capturing the calls, surprising I cannot find any RTP and UDP information whether is on the source or destination port when calls are made but I can find other information.
Thanks
Alan
06-14-2012 06:29 AM
I don't fully understand your question.
If you're trying to capture call traffic by Wiresharking CUCM servers, you'll see very little. You need to capture the traffic at the phone.
As to what ports...
For SIP protocol, 5060 (or 5061 if encrypted)
For SCCP protocol, 2000.
For the audit traffic, it'll be someone in the port range of 16384-32768.
GTG
06-16-2012 01:06 AM
lets said if one wants to have the RTP/UDP packets for a desk phone cisco using sccp to a mobile phone via pstn can the wireshark able to capture that for playing back the voice quality issue ?
Have done on the following
The phone is the source port to a destination port of the laptop with the wireshark application within the edge switch
by turning on the monitoring command to capture the packets
The voice gateway source port of the core switch to a destination port of the laptop within the cire switch by turning on
the monitoring command to capture the packets.
Alan
06-16-2012 02:25 AM
if you want to capture traffic from a phone daisy chained to a laptop, you would need to enable span to pc port on the phone config page from the callmanager.
hope this helps.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide