VoIP Protocol Analyzer

SAFIRE Tracer Plug-In for VoIP Protocol Analysis.

VoIP Protocol Architecture

Overview

The VoIP Protocol Analyzer is a SAFIRE Tracer Plug-In for decoding VoIP signaling according to the protocol specifications provided by ITU-T and IETF standards.

This module also includes VoIP specific event masks for filtering, triggering, counting and searching, both for online and offline processing of captured data.

VoIP Network Architecture

Key Features

• VoIP decode for ITU-T and IETF standards
• Multiple user defined levels of decode detail
• Single line decode with key information for each VoIP message
  (IP address, TCP or UDP ports...)
• Color formatting of field names and values for readability
• Built-in VoIP specific event masks used for filters, triggers and counters

Description

The VoIP Protocol Analyzer decodes the captured signaling layer-by-layer, with configurable detail levels (off, hex, min, med, max) for each layer. There are several predefined settings from single-line decode, displaying only the key information of the entire VoIP message (IP address, TCP or UDP ports), up to maximum mode, which presents every bit-field in a layer with value translation.

SAFIRE Tracer Sample

The flexible stack definition provides an automatic selection of the protocols above Ethernet and IP (TCP, UDP or SCTP) depending on the Ethernet type and IP protocol type.

For more advanced capture and post-processing of messages there are filter, trigger, counter and search features, based on VoIP specific event masks with parameters such as IP address, TCP or UDP ports and direction, allowing:

• filter messages from a specific VoIP address,
• count messages per port,
• trigger capturing the messages for a specific address and port.

Specifications

 

MGCP
	IETF RFC 2705 Media Gateway Control Version1	10/1999

 

SIP
	IETF RFC 3261 SIP (Session Initiation)	03/1999

 

SIP-T
	IETF RFC 3372	09/2002

VoIP Specific Filters