Re: VoIP testing Help

[Hazim <hazim () scan-associates net>]

Clement Dupuis wrote:

> Do take a look at Cain & Abel (www.oxid.it) they have a voip sniffer and it
> does work ver well with some implementation.
>
> On top of all that: it is FREE
>
> Have fun
>
> Clement
>
>
> Clément Dupuis, CD
> President/Security Evangelist/Chief Learning Officer (CLO)
> CCCure Enterprise Security & Training Inc.
> CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
> Tel: 954 364 8410 (Florida)
> Tel: 514 907 1671 (Montreal)
> Tel: 418 907 0263 (Quebec)
> Fax: 636 773 6328 
>
> Maintainer of :
>
> The CISSP and SSCP Open Study Guides Web Site
> http://www.cccure.org      
>
> The Professional Security Testers Warehouse
> http://www.professionalsecuritytesters.org     
>  
>
>  
>
> > -----Original Message-----
> > From: Mark Sec [mailto:mark.sec () gmail com]
> > Sent: Wednesday, July 20, 2005 6:58 PM
> > To: security-basics () securityfocus com; pen-test () securityfocus com;
> > Voipsec () voipsa org
> > Subject: VoIP testing Help
> >
> > Alo Folks:
> >
> > Well now we have a audit over VoIP , we need whitepappers, tools ,
> > links...
> >
> > the big problem may be are the tools, for example we need "examples"
> > or "PoC like sniffing over VoIP whith tools tcpdump and Ethereal, how
> > to convert the traffic to .wav file , Which are the strings over my
> > shell use tcpdump, opensource and comercial tools.
> >
> > thanks for all ur help :-)
> >
> > - Mark
> >
> >    
>
>
>
>
>  
I think Cain & Abel will have a problem with g723 codec. I've tried 
sniff using Ethereal and it works well. Just that u need some additional 
tools such as JmStudio and rptplay.