This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

SIP CID tracking

0

I would like to sniff the WAN for a SIP trunk that is sending CID information to my customer. I have downloaded the Sniffer and have a HUB that I can capture the packets. What should I look for and how can I read the information that I receive? Is there a program routine that would help me?

asked 06 Jan '14, 12:00

Fonedoc's gravatar image

Fonedoc
1111
accept rate: 0%


One Answer:

0

Once you connect a computer to the hub to receive the traffic, you'll need to capture it and read it. Your question is a little bit open-ended, so I'll recommend looking over the Wireshark user manual as a base: http://www.wireshark.org/download/docs/user-guide-us.pdf

Section 4 of the manual goes over how to capture the traffic, and section 6.3 goes over packet filtering. For filtering, just use the filter "sip" in the filter box to see only the SIP packets. From there, you can click on a packet to see all the fields and values, including SIP fields.

answered 06 Jan '14, 14:52

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%