Generic selectors
Exact matches only
Search in title
Search in content
Post Type Selectors

How to tell if packet is VoIP?

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #27715
    Earnest
    Guest

    When sniffing a data stream from a LAN, is there a fast way to identify a VoIP packet?

    Thanks!

    #27716
    Frank
    Guest

    Depends on the protocol the VoIP stream is based on.
    If the VoIP is in ordinary RTP and if your sniffer is able to automatically decode RTP/RTCP (like Packetyzer V2.0 or higher), you’ll see immediately that there’s VoIP traffic (by looking at the codec of the RTP-Payload).

    If the VoIP stream comes from a Skype phone, you’ll see nothing specific in the traffic except that there’s a huge load of packets per second exchanged between two certain peers (i.e. there’s any kind of a stream).

    Some IP-Phones use other protocols than RTP to carry VoIP payload, e.g. the IAX2 protocol “mini packet” (which only carries a 4 byte header before the payload). If your sniffer is able to decode that (like e.g. Packetyzer), again you will see immediately.

    As a conclusion one could say that it all depends on the way the VoIP traffic is carried over the network, and that usually depends on the technology used with the specific IP phone.

    Regards

    Frank

Viewing 2 posts - 1 through 2 (of 2 total)
  • The forum ‘Voice over IP’ is closed to new topics and replies.