How do I setup wireshark to monitor UDP port 514 from a IP phone? asked 16 Dec '13, 07:20 tpodlak |
One Answer:
Assuming the IP phone is connected to a switch, you need to configure a monitor port that will copy all traffic from the port of the IP phone to a port on which you have connected your system with wireshark. Then you can see all traffic from the phone or you can use the capture filter "udp port 514" to only see the syslog data. If the frames are vlan tagged, then you can use the capture filter "vlan and udp port 514" instead :-) answered 16 Dec '13, 07:44 SYN-bit ♦♦ |