asterisk users - Feb 2006 - sniffing sip password/uri/host info

Hello all,

 

I want to sniff all these info to test a sip ip phone talking to a asterisk
server.  I have used tcpdump, but It just shows the 

 

UDP, length: 602

 

Anyway to see the sip uri. Host info?

 

Regards,

Dinesh.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20060221/491e279b/attachment.htm

On Tue February 21 2006 18:53, "Dinesh"
<dinesh@imcb.a-star.edu.sg> wrote:
> Hello all,
>
> I want to sniff all these info to test a sip ip phone talking to a
> asterisk server.  I have used tcpdump, but It just shows the
>
> UDP, length: 602
>
> Anyway to see the sip uri. Host info?
>
> Regards,
> Dinesh.

Hi Dinesh. Make sure that tcpdump is sniffing before the SIP device begins 
the registration process, and ensure that tcpdump is configured to grab 
the correct packets, or all packets.

I hope that helps.
-- Nick
e: nick.hoffman@altcall.com
p: +61 7 5591 3588
f: +61 7 5591 6588

If you receive this email by mistake, please notify us and do not make any 
use of the email.  We do not waive any privilege, confidentiality or 
copyright associated with it.

On Tue, Feb 21, 2006 at 04:53:43PM +0800, Dinesh wrote:
> Hello all,
> 
>  
> 
> I want to sniff all these info to test a sip ip phone talking to a asterisk
> server.  I have used tcpdump, but It just shows the 
> 
Ethereal would probably be a batter analyzer. Not sure how well it
seppurts sip, though. Unlike tcpdump it won't work on-the-fly. But you
can also get tcpdump to dump raw data and analyze it off-line with
ethereal.

-- 
Tzafrir Cohen         | tzafrir@jbr.cohens.org.il | VIM is
http://tzafrir.org.il |                           | a Mutt's  
tzafrir@cohens.org.il |                           |  best
ICQ# 16849755         |                           | friend

> Ethereal would probably be a batter analyzer. Not sure how well it
> seppurts sip, though. Unlike tcpdump it won't work on-the-fly. But you
> can also get tcpdump to dump raw data and analyze it off-line with
> ethereal.
Ethereal can also show SIP traffic on-the-fly! 

"update list of packets in real time" and 
"automatic scrolling in live capture"

A "sip" display filter is needed so you only see SIP traffic, 
a sip capture filter might be needed for very busy networks

-- 
Andreas Sikkema                       BBned NV
Software Engineer                Planeetbaan 4
+31 (0)23 7074342            2132 HZ Hoofddorp