Why do DTMF events (pressing key on phone) not show up in Wireshark capture of a Cisco IP phone. I press various keys during the phone menu after a call connects, but they don't show up. The call and menu choices were successfully completed. asked 19 Feb '13, 07:41  RAS |
2 Answers:
Some questions:
Some hints: If there are DTMF signals in SIP INFO packets, you will find them with this Display filter (uppercase M is intentional!): If there are DTMF signals in RTP EVENT packets, you will find them with this Display filter: If there are DTMF signals inband in the RTP audio stream, then they are just audio signals and your won't see them in Wireshark. Regards answered 19 Feb '13, 08:20  Kurt Knochner ♦ edited 19 Feb '13, 08:21 |
It depends on how the Cisco phone or system works it could send the key press evnts as out of band signaling or as tones in the RTP stream or RTP evnts you have to know which method is beeing used. answered 19 Feb '13, 08:08  Anders ♦ I have tried "SIP INFO" (out of band) and "Inband" DTMF Transmit types and still nothing shows up in Wireshark. I search the capture for "DTMF" and no results appear. (19 Feb '13, 08:11) RAS Well then chanses are that the tone is sent in the voice channel. (19 Feb '13, 08:17) Anders ♦ |
Your suggestion above was correct - I found them using sip.Method == INFO . Thank you for the help!