Penetration Testing mailing list archives

RE: VoIP testing Help


From: "Clement Dupuis" <cdupuis () cccure org>
Date: Thu, 21 Jul 2005 21:41:21 -0400

I mentioned Cain & Abel already.

But there are other tools as well, see a list at:

http://www.professionalsecuritytester.org/modules.php?name=Web_Links&l_op=vi
ewlink&cid=64  

Take care

Clement


Clément Dupuis, CD
President/Security Evangelist/Chief Learning Officer (CLO)
CCCure Enterprise Security & Training Inc.
CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
Tel: 954 364 8410 (Florida)
Tel: 514 907 1671 (Montreal)
Tel: 418 907 0263 (Quebec)
Fax: 636 773 6328 

Maintainer of :

The CISSP and SSCP Open Study Guides Web Site
http://www.cccure.org     

The Professional Security Testers Warehouse
http://www.professionalsecuritytesters.org    
  

-----Original Message-----
From: David Eduardo Acosta Rodríguez [mailto:david.acosta@internet-
solutions.com.co]
Sent: Thursday, July 21, 2005 12:57 PM
To: bytesman; Mark Sec
Cc: security-basics () securityfocus com; pen-test () securityfocus com;
Voipsec () voipsa org
Subject: Re: VoIP testing Help

Hi Mark:

Please read
http://www.networkgeneral.com/uploads/Products/20046243991063/whitepaper_i
ntroduction-voip_0305.pdf

In commercial tools, you can use:

http://www.networkgeneral.com/Products_details.aspx?PrdId=20046243991063
<-
Network General Sniffer Voice

http://www.networkgeneral.com/Products_details.aspx?PrdId=20046117180712
<-
Network General InfinityStream

From the InfinityStream description:

" ...Integrated Voice-over-IP

The Voice Option is a value-added package that integrates with
InfiniStream
Network Management to provide additional insights into voice- and
video-over-IP converged traffic. Voice-over-IP (VoIP) Experts
automatically
detect and help resolve key problems seen on VoIP networks-jitter, packet
loss, packet-sequencing errors, and latency. These VoIP Experts and
call-tracking capabilities, along with the traditional Expert system, help
ensure successful VoIP network rollouts while maintaining "toll-quality"
voice and high-quality data for all users..."


         Ing. David E. Acosta R.
      Security Consultant - CISSP
       Internet Solutions Colombia
  "The Information Security Experts"
http://www.internet-solutions.com.co
 david.acosta () internet-solutions com co
       Phone (movil):(300)2089961
 Phone (office):(091)3120910 ext 17


On 7/21/05, Mark Sec <mark.sec () gmail com> wrote:
Alo Folks:

Well now we have a audit over VoIP , we need whitepappers, tools ,
links...

the big problem may be are the tools, for example we need "examples"
or "PoC like sniffing over VoIP whith tools tcpdump and Ethereal, how
to convert the traffic to .wav file , Which are the strings over my
shell use tcpdump, opensource and comercial tools.

thanks for all ur help :-)

- Mark






Current thread: