Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to sniffer phone traffic on daisy-chained PC?

I am running wireshark on a PC behind my IP phone (7961G). I "enabled" setting

PC Voice VLAN Access*

Span to PC Port*

on this phone.

but I am only seeing multicast/broadcast traffic on the capture (like HSRP from router). No skinny or rtp packets

Is it possible to capture voice packets in this way? or did I miss anything?

4 REPLIES
Cisco Employee

Re: how to sniffer phone traffic on daisy-chained PC?

Hi Eric,

Please make sure you are sniffing the correct interface. For example, if you have more than one interface (such as Wireless Ip address or VPN

connection) select the one you want to sniff. Please check the following link, it shows you how to set up a sniffer capture using wireshark:

http://wiki.wireshark.org/CaptureSetup

Regards,

Teresa.

If you find this post helpful, please rate! :)

Regards, Tere. If you find this post helpful, please rate! :)
New Member

Re: how to sniffer phone traffic on daisy-chained PC?

I can verify that it was running capture on the proper NIC but it seems that IP phone is not passing any traffic to this PC....

Cisco Employee

Re: how to sniffer phone traffic on daisy-chained PC?

Try just spanning the port, not the VLAN.

Make sure that you have the following parameters enabled:

Device --> Phone

Select one of the 7961s that's having this issue

Verify that the "PC Voice VLAN Access" is Enabled

Verify that the "Span to PC Port" is Enabled

Update and Reset

Regards,

Teresa.

Regards, Tere. If you find this post helpful, please rate! :)

Re: how to sniffer phone traffic on daisy-chained PC?

It also could be a problem with the NIC itself or with the driver. Some network card and/or drivers do not support promiscuous mode. (I assume that you didn't disable promiscuous mode within Wireshark). Have you used this computer to sniff other network successfully?

360
Views
3
Helpful
4
Replies