Penetration Testing mailing list archives

Re: VoIP testing Help


From: Tobias Glemser <tglemser () tele-consulting com>
Date: Mon, 25 Jul 2005 10:40:50 +0200

After having a look at this video let me add, that you really don't need a hub or a switch with monitor port to sniff VoIP Connections. Of course sniffing can also be done using Arp-Poisoning on a switched Network without Port Security Functions enabled.
ARP-Poisoning is also one of the core features of C&A.

Mark: C&B is of course only a demo tool for how easy it is to sniff VoIP-Data in an unsecured LAN. It has no ability to do in depth analysis.

Toby

James Moorer wrote on 22.07.2005 21:09:
Cain & Abel can sniff the traffic and reassemble into .wav files.
Depending on the setup it may only capture one side of the conversation.
A video tutorial of sorts is provided at:

http://irongeek.com/i.php?page=videos/cainvoip1
-Jim


Mark Teicher <mht3 () earthlink net> 07/22 12:15 PM >>>

I am bit confused, so how does Cain and Abel help assess a VoIP
solution.  Does it provide analysis of the device configuration ?? How
does it provide detailed on analysis on PESQ, MOS, QOS and Jitter ??





Current thread: