Ask Your Question
0

Capturing handshake between a SIP handset & PBX

asked 2021-02-05 14:36:48 +0000

Hello,

First of all apologies for the basic question.

I'm trying to capture the handshake packets when a SIP handset registers with a PABX & i'm struggling.

I enter the PBX details inc usernames, passwords, etc into the SIP handset. Then i unplug the handset & start the Wireshark then plug it back in.

Once the handset has booted back up I stop the trace & use the display filter to look at the ip address of the PBX to hopefully find the acknowledgement between the PBX & SIP handset but nothing appears. The PBX confirms the handset is registered.

Any idea's?

Thanks. Lee.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2021-02-05 17:22:13 +0000

You have a switched network and as it stands Wireshark on your PC will not see the traffic between the PBX and the handset.

The link @Jaap posted details some methods on how to capture in a switched network.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-02-05 14:36:48 +0000

Seen: 115 times

Last updated: Feb 05
{"cc_re__cc_re__cc_by_sa_3_0_le": [" <div class=\"clearfix\"></div> <div class=\"box statsWidget\"> <div class=\"clearfix\"></div> <h2>Stats</h2> <p>\n        Asked: <strong> <abbr class=\"timeago\" title=\"2021-02-05 14:36:48 +0000\">2021-02-05 14:36:48 +0000</abbr> </strong> </p> <p> \n        Seen: <strong>115 times</strong> </p> <p>\n        Last updated: <strong title=\"2021-02-05 17:22:13.140423\">Feb 05</strong> </p> </div> </div> </div> <!-- template footer.html --> <div id=\"ground\"> <div class=\"content-wrapper\"> <div class=\"copyright\"> <a href=\"http://creativecommons.org/licenses/by-sa/3.0/legalcode\"> <img\n                            class=\"license-logo\"\n                            src=\"/m/default/media/images/cc-by-sa.png?v=1\"\n                            title=\"cc-by-sa\"\n                            alt=\"cc-by-sa\"\n                        /> </a>\n                \n                Copyright Wireshark Foundation, 2017-2020 Content on this site is licensed under a <a href=\"http://creativecommons.org/licenses/by-sa/3.0/legalcode\">Creative Commons Attribution Share Alike 3.0</a> license.\n\n         ", " id=\"ground\"> <div class=\"content-wrapper\"> <div class=\"copyright\"> <a href=\"http://creativecommons.org/licenses/by-sa/3.0/legalcode\"> <img\n                            class=\"license-logo\"\n                            src=\"/m/default/media/images/cc-by-sa.png?v=1\"\n                            title=\"cc-by-sa\"\n                            alt=\"cc-by-sa\"\n                        /> </a>\n                \n                Copyright Wireshark Foundation, 2017-2020 Content on this site is licensed under a <a href=\"http://creativecommons.org/licenses/by-sa/3.0/legalcode\">Creative Commons Attribution Share Alike 3.0</a> license.\n\n            </div> <div class=\"footer-links\" > <a href=\"/about/\">about</a><span class=\"link-separator\"> |</span> <a href=\"/faq/\">faq</a><span class=\"link-separator\"> |</span> <a href=\"/help/\" title=\"help\">help</a> <span class=\"link-separator\"> |</span> <a href=\"/privacy/\">privacy policy</a><span class=\"link-separator\"> |</span> <a href=\"/terms/\">terms of service</a> </div> <div class=\"powered-link\"> <a href=\"http://askbot.com\" target=\"_b"], "copyright__copyright__copyright": [":22:13 +0000\n\nYou have a switched network and as it stands Wireshark on your PC will not see the traffic between the PBX and the handset.\n\nThe link @Jaap posted details some methods on how to capture in a switched network.\n\nedit flag offensive delete link more\n\nYour Answer\n\nPlease start posting anonymously - your entry will be published after you log in or create a new account.\n\nAdd Answer\n\nQuestion Tools\n\n1 follower\n\nStats\n\nAsked: 2021-02-05 14:36:48 +0000\n\nSeen: 115 times\n\nLast updated: Feb 05", ":22:13 +0000\n\nYou have a switched network and as it stands Wireshark on your PC will not see the traffic between the PBX and the handset.\n\nThe link @Jaap posted details some methods on how to capture in a switched network.\n\nedit flag offensive delete link more\n\nYour Answer\n\nPlease start posting anonymously - your entry will be published after you log in or create a new account.\n\nAdd Answer\n\nQuestion Tools\n\n1 follower\n\nStats\n\nAsked: 2021-02-05 14:36:48 +0000\n\nSeen: 115 times\n\nLast updated: Feb 05"]}