What kind of phones were these taken from? Spectralink phones can be
used with a variety of PBX systems so you may not be looking at traffic
that is pure SiP. For instance, Spectralink makes wireless telephones
that can interface with the Mitel PBX, which uses proprietary encryption
on its voice traffic.
________________________________
From: [email protected]
[mailto:[email protected]] On Behalf Of Larry
McDonald
Sent: Monday, October 26, 2009 2:28 PM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] Decoding Spectralink to Audio?
I have had some luck decoding VoIP with Cain and abel. Under the Sniffer
tab there is a sub-tab for VoIP, worked real nice for me converting
network capture for the sessions into wav files.
Here is some info from the manual:
How it works
The sniffer extracts RTP session parameters like RTP ports,
caller/responder IP addresses and dynamic codec types from SIP or MGCP
session preceding the data flow on RTP. Then it captures and decodes RTP
audio streams encoded with the following codecs: G711 uLaw, G771 aLaw,
ADPCM, DVI4, LPC, GSM610, Microsoft GSM, L16, G729, Speex, iLBC, G722.1,
G723.1, G726-16, G726-24, G726-32, G726-40, LPC-10, SIREN, LRWB-16khz.
Once decoded the audio is saved into mono or stereo WAV files on your
hard disk.
Larry
On Mon, Oct 26, 2009 at 1:34 PM, Ben Greenfield <[email protected]>
wrote:
Does anyone know of a utility that can decode an IEEE 802.11 capture
of calls made using the Spectralink protocol?
The network was WEP encrypted, which I was able to decrypt in
Wireshark, but the filters for the various types of VoIP aren't
picking up Spectralink. I've done some googleing and haven't found
anything yet...
Thanks,
_______________________________________________
Pauldotcom mailing list
[email protected]
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com
--
Larry McDonald
******************************************************************************
This email contains confidential and proprietary information and is not to be
used or disclosed to anyone other than the named recipient of this email,
and is to be used only for the intended purpose of this communication.
******************************************************************************
_______________________________________________
Pauldotcom mailing list
[email protected]
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com
