From: Hazim (hazim@scan-associates.net)
Date: Thu Jul 21 2005 - 22:34:49 EDT
Clement Dupuis wrote:
>Do take a look at Cain & Abel (www.oxid.it) they have a voip sniffer and it
>does work ver well with some implementation.
>
>On top of all that: it is FREE
>
>Have fun
>
>Clement
>
>
>Clément Dupuis, CD
>President/Security Evangelist/Chief Learning Officer (CLO)
>CCCure Enterprise Security & Training Inc.
>CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
>Tel: 954 364 8410 (Florida)
>Tel: 514 907 1671 (Montreal)
>Tel: 418 907 0263 (Quebec)
>Fax: 636 773 6328
>
>Maintainer of :
>
>The CISSP and SSCP Open Study Guides Web Site
>http://www.cccure.org
>
>The Professional Security Testers Warehouse
>http://www.professionalsecuritytesters.org
>
>
>
>
>>-----Original Message-----
>>From: Mark Sec [mailto:mark.sec@gmail.com]
>>Sent: Wednesday, July 20, 2005 6:58 PM
>>To: security-basics@securityfocus.com; pen-test@securityfocus.com;
>>Voipsec@voipsa.org
>>Subject: VoIP testing Help
>>
>>Alo Folks:
>>
>>Well now we have a audit over VoIP , we need whitepappers, tools ,
>>links...
>>
>>the big problem may be are the tools, for example we need "examples"
>>or "PoC like sniffing over VoIP whith tools tcpdump and Ethereal, how
>>to convert the traffic to .wav file , Which are the strings over my
>>shell use tcpdump, opensource and comercial tools.
>>
>>thanks for all ur help :-)
>>
>>- Mark
>>
>>
>>
>
>
>
>
>
>
I think Cain & Abel will have a problem with g723 codec. I've tried
sniff using Ethereal and it works well. Just that u need some additional
tools such as JmStudio and rptplay.
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:54:37 EDT