Thanks Gary for the detail. We don't use netflow but I see your point here. For packet filter, you can simply specify RTP to filter the traffic, right?
Besides monitoring the traffic, if I want to decode the signaling traffic to know who is calling who, is ntop able to do that as you know? Since wireshark can show this information based on the skinny traffic, I guess that should not be hard for ntop. Thanks. Lou On Mon, Jul 19, 2010 at 11:49 AM, Gary Gatten <[email protected]> wrote: > I thought one could configure a range of ports for use by the phones? > > > > Also, if you have Ci$co gear you can probably setup multiple export > statements: one that exports only VoIP/IPT traffic, and one that exports > everything else. Sorry, assuming you’re using netflow. You can also > accomplish the same thing with packet filters in ntop and as Thomas pointed > out, SPAN only the Voice VLAN to one NIC in ntop and perhaps all other > traffic to another NIC – if you desire. > > > > There are likely several methods that would work for you. > > > > G > > > > > ------------------------------ > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Thomas Mullins > *Sent:* Monday, July 19, 2010 11:32 AM > *To:* [email protected]; [email protected] > *Subject:* Re: [Ntop] How to monitor VoIP traffic > > > > One thought would be to have all your Voice equipment in a dedicated Voice > VLAN. Then you could just monitor that VLAN. That is how we are going to > monitor our Voice traffic. > > > > Shane > > > > > ------------------------------ > > *From:* [email protected] [mailto: > [email protected]] *On Behalf Of *Hailu Meng > *Sent:* Monday, July 19, 2010 12:18 PM > *To:* [email protected] > *Subject:* [Ntop] How to monitor VoIP traffic > > > > Hi All, > > I installed Pre3.4 version and want to define some interested traffic flow > which can be shown in ntop. One is RTP VoIP traffic among our cisco phone > system. Since the RTP traffic port is dynamic, it can't be defined in my > protocol list. Is there anyway I can setup ntop to show RTP traffic besides > the cisco skinny traffic? > > Thanks!!! > > Lou > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. If you > are not the intended recipient, you are hereby notified that any review, > use, dissemination, disclosure or copying of this email and its attachments, > if any, is strictly prohibited. If you have received this email in error, > please immediately notify the sender by return email and delete this email > from your system." > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > >
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
