how to sniffer phone traffic on daisy-chained PC?

Eric.Wang · ‎07-28-2009

I am running wireshark on a PC behind my IP phone (7961G). I "enabled" setting

PC Voice VLAN Access*

Span to PC Port*

on this phone.

but I am only seeing multicast/broadcast traffic on the capture (like HSRP from router). No skinny or rtp packets

Is it possible to capture voice packets in this way? or did I miss anything?

testeven · ‎07-28-2009

Hi Eric,

Please make sure you are sniffing the correct interface. For example, if you have more than one interface (such as Wireless Ip address or VPN

connection) select the one you want to sniff. Please check the following link, it shows you how to set up a sniffer capture using wireshark:

http://wiki.wireshark.org/CaptureSetup

Regards,

Teresa.

If you find this post helpful, please rate! :)

Regards, Tere. If you find this post helpful, please rate! :)

Eric.Wang · ‎07-28-2009

I can verify that it was running capture on the proper NIC but it seems that IP phone is not passing any traffic to this PC....

testeven · ‎07-28-2009

Try just spanning the port, not the VLAN.

Make sure that you have the following parameters enabled:

Device --> Phone

Select one of the 7961s that's having this issue

Verify that the "PC Voice VLAN Access" is Enabled

Verify that the "Span to PC Port" is Enabled

Update and Reset

Regards,

Teresa.

Regards, Tere. If you find this post helpful, please rate! :)

CHRIS CHARLEBOIS · ‎08-03-2009

It also could be a problem with the NIC itself or with the driver. Some network card and/or drivers do not support promiscuous mode. (I assume that you didn't disable promiscuous mode within Wireshark). Have you used this computer to sniff other network successfully?