07-28-2009 11:10 AM - edited 03-15-2019 05:09 AM
I am running wireshark on a PC behind my IP phone (7961G). I "enabled" setting
PC Voice VLAN Access*
Span to PC Port*
on this phone.
but I am only seeing multicast/broadcast traffic on the capture (like HSRP from router). No skinny or rtp packets
Is it possible to capture voice packets in this way? or did I miss anything?
07-28-2009 11:21 AM
Hi Eric,
Please make sure you are sniffing the correct interface. For example, if you have more than one interface (such as Wireless Ip address or VPN
connection) select the one you want to sniff. Please check the following link, it shows you how to set up a sniffer capture using wireshark:
http://wiki.wireshark.org/CaptureSetup
Regards,
Teresa.
If you find this post helpful, please rate! :)
07-28-2009 11:29 AM
I can verify that it was running capture on the proper NIC but it seems that IP phone is not passing any traffic to this PC....
07-28-2009 12:01 PM
Try just spanning the port, not the VLAN.
Make sure that you have the following parameters enabled:
Device --> Phone
Select one of the 7961s that's having this issue
Verify that the "PC Voice VLAN Access" is Enabled
Verify that the "Span to PC Port" is Enabled
Update and Reset
Regards,
Teresa.
08-03-2009 01:00 PM
It also could be a problem with the NIC itself or with the driver. Some network card and/or drivers do not support promiscuous mode. (I assume that you didn't disable promiscuous mode within Wireshark). Have you used this computer to sniff other network successfully?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide