wireshark capturing

[alanhow2007]

   I would like to know what have not turn on in Wireshark. When I try capturing the calls, surprising I cannot find any RTP and UDP information whether is on the source or destination port when calls are made but I can find other information.

Thanks

Alan                

[Gordon Ross]

I don't fully understand your question.

If you're trying to capture call traffic by Wiresharking CUCM servers, you'll see very little. You need to capture the traffic at the phone.

As to what ports...

For SIP protocol, 5060 (or 5061 if encrypted)

For SCCP protocol, 2000.

For the audit traffic, it'll be someone in the port range of 16384-32768.

GTG

[alanhow2007]

lets said if one wants to have the RTP/UDP packets for a desk phone cisco using sccp to a mobile phone via pstn can the wireshark able to capture that for playing back the voice quality issue ?

Have done on the following

The phone is the source port to a destination port of the laptop with the wireshark application within the edge switch

by turning on the monitoring command to capture the packets

The voice gateway source port of the core switch to a destination port of the laptop within the cire switch by turning on

the monitoring command to capture the packets.

Alan

[nikshah]

if you want to capture traffic from a phone daisy chained to a laptop, you would need to enable span to pc port on the phone config page from the callmanager.

hope this helps.