On Thu, 22 Apr 2010, Philipp von Klitzing wrote: > Hi! > >> But it draws attention to me between the PC with softphone and the >> telephone I see traffic ARP or ICMP that could make to try between the >> equipment but does not see RTP. Is there some special consideration that >> it must to observe? > > Your English is seriously twisted, making your question impossible to > understand. My feeling is that you have used a machine translation > service. > > Your question is probably: > "I can see ARP and ICMP, but not RTP, what am I missing?" > > How did you place your virtual "listening" machine into the network, is > it connected to an old hub, or a switch, or the mirroring port of a > switch, or does it use the same NIC (and computer) as the softphone? You > will first need to get "in between" the two endpoints in order to be able > to capture that point-to-point RTP traffic - there are "normal" and > "malicious" ways to achieve that.
Depends on what you consider malicious :) ARP Cache poisoning is considered fairly normal by some these days... However the easiest way to capture data is on the asterisk server itself... Gordon -- _____________________________________________________________________ -- Bandwidth and Colocation Provided by http://www.api-digital.com -- New to Asterisk? Join us for a live introductory webinar every Thurs: http://www.asterisk.org/hello asterisk-users mailing list To UNSUBSCRIBE or update options visit: http://lists.digium.com/mailman/listinfo/asterisk-users
