wireshark packet capture for phones on wifi

It is usually used on PC, and unfortunately it is not available on android. The software is usually use as a learning tool for information security amateurs, beginner even to intermediate level, and is a pretty handy way to understand a network traffic analysis. Wireshark is a software that can be use to see all the network communication going in and out of all the computer in your network. pcap file.Best Wireshark Apps Alternative for your Android Phone The resulting traffic should show only traffic comming to and from the IP phone.ģd. To filter down use the eth.addr filter with the MAC Address of the IP phone. Depending on the current PC activity it could be a lot of traffic. Traffic should start to scroll down on the window. This will open the capture interfaces dialog, were you can select the NIC connected to the back of the IP phone we will capture. Open Wireshark and click on the first NIC to the left. Note 79 Cisco IP Phones do not support the span to PC port feature, all data is automatically sent to the PC port. Save and reset the phone so it can retrieve the new configuration file. This will trigger a change to the phone's TFTP configuration file. There should be a PC connected to the back of the IP phone in the PC port, and the phone connected to the Switch.įrom the IP phone configuration page, scroll down to the Protocol Specific Configuration section, and enable the 'Span to PC Port' configuration option. These instructions are relevant for Cisco IP Phone Models, 7941, 7942, 7961, 7962, 7965, 7970, 7975, 99xx, 89xx, and 699xx.įor models 79, skip Step 2 since 'Span to PC Port setting' is not required. From there, the data can be captured using a packet capture utility.

It can be enabled to copy all traffic entering into the SWITCH port, and send it to the PC port. This article describes how to collect the capture using the IP Phone's built in PC ports. There are many ways this can be accomplished. For troubleshooting purposes one may need to gather a packet (sniffer) capture from an IP Phone.

Wireshark packet capture for phones on wifi