The following diagram depicts the scenario. Details of the intervening network infrastructure are not included here, such as the NAT router behind which the X-lite client is operating as these are irrelevant to the exercise. There is a second phone that also registers on the same SIP server which has an extension of 4XX and an IP address of X.Y.Z.183. This device registers with a SIP server somewhere on the Internet with an IP address of X.Y.Z.23. The scenario for Wireshark SIP analysis that will be examined is one where there is an X -lite SIP client, now known as Bria Solo Free, configured on a computer with an extension of 3XX and an IP address of 192.168.1.61. Type “rtp” in to the filter text box and click apply.Wireshark SIP Analysis Scenario Details Stop the capture and use the Filter to search for “rtp” and/or “sip” (lowercase only)Ģ. You should see data packets being captured in the Wireshark capture window Ensure that RTP and/or SIP Traffic is Being Capturedġ. Select the interface you wish to capture on (ie. Make sure that the phone system is powered on and is configured on the same network that you will be capturing traffic onģ. All Hubs are half duplex devices and most are 10mbps only devices.ġ. A Hub cannot be used because the VoIP daughterboard requires a full duplex 100/1000 Ethernet connection.If this is a capture of a connection between a phone system and a VoIP phone, simultaneous real-time captures from both ends will be required for troubleshooting.A managed switch capable of port mirroring.Preferably a laptop with a 10/100 or 10/100/1000 Ethernet interface card.Half Duplex connections are not supported.NEC SL2100 KSU or NEC SL1100 KSU with VoIP daughterboard Card.This is a must-read for installers working with or troubleshooting VoIP issues. Wireshark allows you to capture and analyze VoIP network traffic and packet data from the NEC SL2100 and SL1100.

Voip pcap wireshark