Analyzing VoIP Traffic with Wireshark

Analyzing VoIP Traffic with Wireshark

1h 34mAdvanced2019-01-10

Authors

Lisa Bock

Lisa Bock

Security ambassador with a broad range of IT skills and knowledge

Course details

Voice over IP (VoIP) is a technology that sends voice data in packets using the IP network—allowing you to make calls using an internet connection instead of a traditional phone line. In this course, join Lisa Bock as she takes an in-depth look at VoIP protocols and components, as well as how to troubleshoot VoIP calls. Lisa begins with an overview of VoIP, discussing its uses, codecs, and components. She then reviews the protocols that make VoIP possible, including TCP/IP, Skinny Client Control Protocol (SCCP) and the H.323 family. She provides a review of media gateways and network operations, including quality of service and DNS, that are critical to the success of VoIP. To wrap up, Lisa dives into Wireshark statistics, showing how to leverage these statistics to troubleshoot VoIP.

Learning objectives
Voice over IP (VoIP) and Unified Communications
Digitizing a signal
VoIP components
Protocols used by VoIP, including TCP/IP and DHCP
Connecting systems
Gateways and gatekeepers
Factors that might affect quality on a VoIP network
Wireshark statistics

Skills covered

WiresharkVideo ConferencingNetwork SecurityNetwork AdministrationCybersecurityNetwork and System AdministrationBusiness Software and ToolsOpen SourceDeep Dive (X:Y)

Concepts

Introduction

  • Understand and troubleshoot VoIP
  • Getting the most out of this course

VoIP Overview

  • Voice over IP (VoIP)
  • VoIP and Unified Communications (UC)
  • Digitizing a signal
  • VoIP components

Protocols

  • Protocols overview
  • TCP IP
  • DHCP
  • Real-Time Transport Protocol
  • Real-Time Control Protocol
  • Skinny Client Control Protocol (SCCP)

Connecting Systems

  • Gateways and gatekeepers
  • Understanding MGCP and Megaco (H.248)
  • Session Initiation Protocol
  • H.323 family
  • Establishing an H.323 connection
  • Evaluating H.323

Network Operations

  • Performance overview
  • Quality of service
  • Domain Name System
  • Directory integration
  • Using STIR SHAKEN to reduce robocalls

Wireshark Statistics

  • Dissecting a VoIP call
  • Evaluating call quality
  • Analyzing an RTP stream
  • Recognizing jitter

Conclusion

  • Next steps
40,000 Toman