Decoding Spectralink to Audio?

[Russell.Butturini at Healthways.com (Butturini, Russell)]

What kind of phones were these taken from? Spectralink phones can be
used with a variety of PBX systems so you may not be looking at traffic
that is pure SiP.  For instance, Spectralink makes wireless telephones
that can interface with the Mitel PBX, which uses proprietary encryption
on its voice traffic.

 

________________________________

From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Larry
McDonald
Sent: Monday, October 26, 2009 2:28 PM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] Decoding Spectralink to Audio?

 

I have had some luck decoding VoIP with Cain and abel. Under the Sniffer
tab there is a sub-tab for VoIP, worked real nice for me converting
network capture for the sessions into wav files.

Here is some info from the manual:


How it works


The sniffer extracts RTP session parameters like RTP ports,
caller/responder IP addresses and dynamic codec types from SIP or MGCP
session preceding the data flow on RTP. Then it captures and decodes RTP
audio streams encoded with the following codecs: G711 uLaw, G771 aLaw,
ADPCM, DVI4, LPC, GSM610, Microsoft GSM, L16, G729, Speex, iLBC, G722.1,
G723.1, G726-16, G726-24, G726-32, G726-40, LPC-10, SIREN, LRWB-16khz.
Once decoded the audio is saved into mono or stereo WAV files on your
hard disk.

 

Larry

 

On Mon, Oct 26, 2009 at 1:34 PM, Ben Greenfield <bcg at struxural.com>
wrote:

Does anyone know of a utility that can decode an IEEE 802.11 capture
of calls made using the Spectralink protocol?

The network was WEP encrypted, which I was able to decrypt in
Wireshark, but the filters for the various types of VoIP aren't
picking up Spectralink.  I've done some googleing and haven't found
anything yet...

Thanks,
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com




-- 
Larry McDonald


******************************************************************************
This email contains confidential and proprietary information and is not to be used or disclosed to anyone other than 
the named recipient of this email, 
and is to be used only for the intended purpose of this communication.
******************************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20091026/9e024eb2/attachment.htm