How to Listen to VoIP Conversations with Wireshark without Capturing the Call Setup

Sometime when performing a packet capture, you may come across some VoIP conversations. If the initial call setup is not in this capture, subsequent voice packets will be labeled in such a way that it makes it difficult to decode the VoIP conversation. What follows is a tutorial to get around this problem.

Tags: , , , , ,

2 Responses to “How to Listen to VoIP Conversations with Wireshark without Capturing the Call Setup”

  1. Kevin G April 19, 2017 at 2:57 pm #

    I have a Cisco skinny call that wireshark was treating as UDP instead of RTP. This method worked for it was well, even though I had call set-up info in the capture. thanks.

    • Jason April 19, 2017 at 7:53 pm #

      I had a friend call me about the same thing. It seems that Wireshark doesn’t recognize SCCP that well.

Leave a Reply