I noticed that since replacing mj dongle with ATA/Sip credentials, I don't see any network activity going through the Ethernet card since the ATA is connected to an airlink 101 router and has its own static IP assigned to it. I would like to see a call captured with Wireshark with all the rtp packets but I can only get it to capture tcp packets like when I go its configuration via http.
Is there any way w/ Wireshark or some similar capture program to do this? Or am I SOL since wireshark doesn't see other devices connected to the router and you simply can't do this behind a router.
As long as your ATA is on the same network as your computer and your NIC is capable of promiscuous mode, you should be able to do it. Run a capture on your network interface. Wireshark should capture both TCP and UDP packets.
After you capture, go to Analyze -> Decode As... and pick RTP on the list; hit OK. Once that is done, go to Statistics ->RTP -> Show All Streams
Highlight the stream you want to check and click Analyze. Most likely you will have two streams, one in each direction. You can "Save payload" to an .au file which can be opened up in Audacity. Do the same for the other stream. Now you can open both .au files at the same time in Audacity. You'll be able to listen to either or both streams of audio together.
You will still need to place a hub (not switch) in the path, as murphy says. Otherwise, your Wireshark-equipped PC will not be able to listen in on the VoIP conversation.
Thanks, guys - looks like I need a cheapie hub. Actually, I just wanted to verify that if I change the proxy on the ATA, whther this had effect on voice quality and I guess it did (changed from la to las vegas proxy server.