What do you mean, "analyze" the VoIP traffic? Ntop will provide basic stats, throughput, pps, etc - traffic matrix as well. Your IPT/VoIP system should provide the Call Detail records: caller, callee, call time, etc. Wireshark will provide detail for low level analysis. What are you wanting to "see" that you may need nProbe for?
________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Hailu Meng Sent: Thursday, July 22, 2010 2:15 PM To: [email protected] Subject: Re: [Ntop] How to monitor VoIP traffic Thanks Gary. I just took a look about nProbe feature. There is one item listed: VoIP (SIP and RTP) traffic analysis. So I think I should install nProbe to analyze the VoIP traffic. Anybody can confirm this? Thanks a lot! Lou On Wed, Jul 21, 2010 at 5:34 PM, Gary Gatten <[email protected]<mailto:[email protected]>> wrote: Sorry, can't help much here as I don't use IPT / VoIP. I THOUGHT there was a VoIP plugin or embedded support in nTop - but not sure. ________________________________ From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Hailu Meng Sent: Wednesday, July 21, 2010 5:24 PM To: [email protected]<mailto:[email protected]> Subject: Re: [Ntop] How to monitor VoIP traffic I got switch setup and the voip traffic now is being monitored by another NIC in ntop server. But how can I see the call flow? caller and callee id? I remember ntop has ability to see that. But I can't find anything related in the settings. Do I need nProbe for this purpose? Thanks. Lou On Mon, Jul 19, 2010 at 12:02 PM, Hailu Meng <[email protected]<mailto:[email protected]>> wrote: Thanks Gary for the detail. We don't use netflow but I see your point here. For packet filter, you can simply specify RTP to filter the traffic, right? Besides monitoring the traffic, if I want to decode the signaling traffic to know who is calling who, is ntop able to do that as you know? Since wireshark can show this information based on the skinny traffic, I guess that should not be hard for ntop. Thanks. Lou On Mon, Jul 19, 2010 at 11:49 AM, Gary Gatten <[email protected]<mailto:[email protected]>> wrote: I thought one could configure a range of ports for use by the phones? Also, if you have Ci$co gear you can probably setup multiple export statements: one that exports only VoIP/IPT traffic, and one that exports everything else. Sorry, assuming you're using netflow. You can also accomplish the same thing with packet filters in ntop and as Thomas pointed out, SPAN only the Voice VLAN to one NIC in ntop and perhaps all other traffic to another NIC - if you desire. There are likely several methods that would work for you. G ________________________________ From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Thomas Mullins Sent: Monday, July 19, 2010 11:32 AM To: [email protected]<mailto:[email protected]>; [email protected]<mailto:[email protected]> Subject: Re: [Ntop] How to monitor VoIP traffic One thought would be to have all your Voice equipment in a dedicated Voice VLAN. Then you could just monitor that VLAN. That is how we are going to monitor our Voice traffic. Shane ________________________________ From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Hailu Meng Sent: Monday, July 19, 2010 12:18 PM To: [email protected]<mailto:[email protected]> Subject: [Ntop] How to monitor VoIP traffic Hi All, I installed Pre3.4 version and want to define some interested traffic flow which can be shown in ntop. One is RTP VoIP traffic among our cisco phone system. Since the RTP traffic port is dynamic, it can't be defined in my protocol list. Is there anyway I can setup ntop to show RTP traffic besides the cisco skinny traffic? Thanks!!! Lou "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
