Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

wireshark capturing

   I would like to know what have not turn on in Wireshark. When I try capturing the calls, surprising I cannot find any RTP and UDP information whether is on the source or destination port when calls are made but I can find other information.



  • IP Telephony

wireshark capturing

I don't fully understand your question.

If you're trying to capture call traffic by Wiresharking CUCM servers, you'll see very little. You need to capture the traffic at the phone.

As to what ports...

For SIP protocol, 5060 (or 5061 if encrypted)

For SCCP protocol, 2000.

For the audit traffic, it'll be someone in the port range of 16384-32768.


Please rate all helpful posts.
New Member

wireshark capturing

lets said if one wants to have the RTP/UDP packets for a desk phone cisco using sccp to a mobile phone via pstn can the wireshark able to capture that for playing back the voice quality issue ?

Have done on the following

The phone is the source port to a destination port of the laptop with the wireshark application within the edge switch

by turning on the monitoring command to capture the packets

The voice gateway source port of the core switch to a destination port of the laptop within the cire switch by turning on

the monitoring command to capture the packets.


Cisco Employee

wireshark capturing

if you want to capture traffic from a phone daisy chained to a laptop, you would need to enable span to pc port on the phone config page from the callmanager.

hope this helps.

This widget could not be displayed.