Thanks Gary. I just took a look about nProbe feature. There is one item
listed:
VoIP (SIP and RTP) traffic analysis.

So I think I should install nProbe to analyze the VoIP traffic. Anybody can
confirm this? Thanks a lot!

Lou

On Wed, Jul 21, 2010 at 5:34 PM, Gary Gatten <[email protected]> wrote:

>  Sorry, can’t help much here as I don’t use IPT / VoIP.  I THOUGHT there
> was a VoIP plugin or embedded support in nTop – but not sure.
>
>
>  ------------------------------
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Hailu Meng
> *Sent:* Wednesday, July 21, 2010 5:24 PM
> *To:* [email protected]
>
> *Subject:* Re: [Ntop] How to monitor VoIP traffic
>
>
>
> I got switch setup and the voip traffic now is being monitored by another
> NIC in ntop server. But how can I see the call flow? caller and callee id? I
> remember ntop has ability to see that. But I can't find anything related in
> the settings. Do I need nProbe for this purpose?
>
> Thanks.
>
> Lou
>
> On Mon, Jul 19, 2010 at 12:02 PM, Hailu Meng <[email protected]> wrote:
>
> Thanks Gary for the detail. We don't use netflow but I see your point here.
> For packet filter, you can simply specify RTP to filter the traffic, right?
>
> Besides monitoring the traffic, if I want to decode the signaling traffic
> to know who is calling who, is ntop able to do that as you know? Since
> wireshark can show this information based on the skinny traffic, I guess
> that should not be hard for ntop.
>
> Thanks.
>
> Lou
>
> On Mon, Jul 19, 2010 at 11:49 AM, Gary Gatten <[email protected]> wrote:
>
>   I thought one could configure a range of ports for use by the phones?
>
>
>
> Also, if you have Ci$co gear you can probably setup multiple export
> statements: one that exports only VoIP/IPT traffic, and one that exports
> everything else.  Sorry, assuming you’re using netflow.  You can also
> accomplish the same thing with packet filters in ntop and as Thomas pointed
> out, SPAN only the Voice VLAN to one NIC in ntop and perhaps all other
> traffic to another NIC – if you desire.
>
>
>
> There are likely several methods that would work for you.
>
>
>
> G
>
>
>
>
>  ------------------------------
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Thomas Mullins
> *Sent:* Monday, July 19, 2010 11:32 AM
> *To:* [email protected]; [email protected]
> *Subject:* Re: [Ntop] How to monitor VoIP traffic
>
>
>
> One thought would be to have all your Voice equipment in a dedicated Voice
> VLAN.  Then you could just monitor that VLAN.  That is how we are going to
> monitor our Voice traffic.
>
>
>
> Shane
>
>
>
>
>  ------------------------------
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Hailu Meng
> *Sent:* Monday, July 19, 2010 12:18 PM
> *To:* [email protected]
> *Subject:* [Ntop] How to monitor VoIP traffic
>
>
>
> Hi All,
>
> I installed Pre3.4 version and want to define some interested traffic flow
> which can be shown in ntop. One is RTP VoIP traffic among our cisco phone
> system. Since the RTP traffic port is dynamic, it can't be defined in my
> protocol list. Is there anyway I can setup ntop to show RTP traffic besides
> the cisco skinny traffic?
>
> Thanks!!!
>
> Lou
>
> "This email is intended to be reviewed by only the intended recipient and
> may contain information that is privileged and/or confidential. If you are
> not the intended recipient, you are hereby notified that any review, use,
> dissemination, disclosure or copying of this email and its attachments, if
> any, is strictly prohibited. If you have received this email in error,
> please immediately notify the sender by return email and delete this email
> from your system."
>
>
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>
>
>   "This email is intended to be reviewed by only the intended recipient
> and may contain information that is privileged and/or confidential. If you
> are not the intended recipient, you are hereby notified that any review,
> use, dissemination, disclosure or copying of this email and its attachments,
> if any, is strictly prohibited. If you have received this email in error,
> please immediately notify the sender by return email and delete this email
> from your system."
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to