[Asterisk-Users] sniffing sip password/uri/host info

[Andreas Sikkema]

> Ethereal would probably be a batter analyzer. Not sure how well it
> seppurts sip, though. Unlike tcpdump it won't work on-the-fly. But you
> can also get tcpdump to dump raw data and analyze it off-line with
> ethereal.

Ethereal can also show SIP traffic on-the-fly! 

"update list of packets in real time" and 
"automatic scrolling in live capture"

A "sip" display filter is needed so you only see SIP traffic, 
a sip capture filter might be needed for very busy networks

-- 
Andreas Sikkema                       BBned NV
Software Engineer                Planeetbaan 4
+31 (0)23 7074342            2132 HZ Hoofddorp