Using Wireshark to capture rtp packets on ATA

magicJack Tips and Tricks

Moderators: Bill Smith, Pilot

Post Reply
synchron
Dan isn't smart enough to hire me
Posts: 230
Joined: Thu May 15, 2008 11:28 am

Using Wireshark to capture rtp packets on ATA

Post by synchron »

I noticed that since replacing mj dongle with ATA/Sip credentials, I don't see any network activity going through the Ethernet card since the ATA is connected to an airlink 101 router and has its own static IP assigned to it. I would like to see a call captured with Wireshark with all the rtp packets but I can only get it to capture tcp packets like when I go its configuration via http.

Is there any way w/ Wireshark or some similar capture program to do this? Or am I SOL since wireshark doesn't see other devices connected to the router and you simply can't do this behind a router.

TIA,

Synchron 8)
User avatar
murphy
Dan isn't smart enough to hire me
Posts: 184
Joined: Wed Jan 21, 2009 3:07 pm
Location: Pennsylvania

Post by murphy »

Get a hub (may be difficult to find these days), connect the computer and the ATA to the hub and then connect the hub to the router.
proccw
MagicJack Newbie
Posts: 8
Joined: Fri Sep 05, 2008 9:49 pm

Wireshark

Post by proccw »

As long as your ATA is on the same network as your computer and your NIC is capable of promiscuous mode, you should be able to do it. Run a capture on your network interface. Wireshark should capture both TCP and UDP packets.

After you capture, go to Analyze -> Decode As... and pick RTP on the list; hit OK. Once that is done, go to Statistics ->RTP -> Show All Streams

Highlight the stream you want to check and click Analyze. Most likely you will have two streams, one in each direction. You can "Save payload" to an .au file which can be opened up in Audacity. Do the same for the other stream. Now you can open both .au files at the same time in Audacity. You'll be able to listen to either or both streams of audio together.
mberlant
Dan Should Pay Me
Posts: 829
Joined: Sun Feb 01, 2009 7:47 pm
Location: Japan

Post by mberlant »

You will still need to place a hub (not switch) in the path, as murphy says. Otherwise, your Wireshark-equipped PC will not be able to listen in on the VoIP conversation.
synchron
Dan isn't smart enough to hire me
Posts: 230
Joined: Thu May 15, 2008 11:28 am

Post by synchron »

Thanks, guys - looks like I need a cheapie hub. Actually, I just wanted to verify that if I change the proxy on the ATA, whther this had effect on voice quality and I guess it did (changed from la to las vegas proxy server.

Synchron 8)
Post Reply