[Asterisk-Users] Network Sniffing Calls for recording

[Leo Ann Boon]

I only know of 2 such systems. 1 from Nice and the other from Eyretel 
(now part of Witness). The Nice solution has a option to sniff on a 
network hub, while the Eyretel requires a span port on a Cisco switch.

The way these systems work is quite straightforward. When a call is 
connected, the IP PBX sends the endpoints to be recorded to the 
recorder. The recorder just captures all the RTP packets originating 
from the end points. The scheme is easy to implement in a hub 
environment. In a switched environment, things are more complicated; 
that's where the span port comes in.

To use the span port, the network admin must manually configure the 
switch to copy packets to/from the target ports to the span port. I 
suspect the span port might get saturated very easily. Forwarding 2 
ports produces a maximum bandwidth of 200Mbps to be copied into the 
100Mbps span port, add another few more ports and it'll skyrocket. Guess 
you'll need more switches to support large scale recording.

I was toying with the idea of using arp-spoofing, man-in-the-middle 
attack, to build a sniffing recorder. But, it will have a similar 
saturation problem like the span port method.

Just my $0.02.


lists wrote:

>True * answer are there but what about non * network sniffering call
>monitoring. Does anyone have info on a good one.  I am also searching
>voip-info again but so far my key words are hitting on * solutions only
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of C. Johnson
>Sent: Monday, June 07, 2004 5:20 PM
>To: asterisk-users at lists.digium.com
>Subject: RE: [Asterisk-Users] Network Sniffing Calls for recording
>
>
>It's in the Bible...
>
>http://www.voip-info.org/tiki-index.php 
>
>
>Still, I'd be interested to find a solution for recording via sniffing over
>the net. My solution was to have my asterisk pbx's monitor directory connect
>to my "recording server" via a nfs mount, but that's a raggedy ann way of
>doing it.
>
>-----Original Message-----
>From: asterisk-users-admin at lists.digium.com
>[mailto:asterisk-users-admin at lists.digium.com] On Behalf Of hank smith
>Sent: Monday, June 07, 2004 6:10 PM
>To: asterisk-users at lists.digium.com
>Subject: Re: [Asterisk-Users] Network Sniffing Calls for recording
>
>how can you record calls with asterisk?
>I didn't even know this was possible
>can some one point me to a url for info on this?
>----- Original Message -----
>From: "lists" <lists at efastfunding.com>
>To: <asterisk-users at lists.digium.com>
>Sent: Monday, June 07, 2004 1:30 PM
>Subject: [Asterisk-Users] Network Sniffing Calls for recording
>
>
>  
>
>>Ok assuming I don't want to record calls using * but instead want a
>>dedicated server that listens to a mirror port and records calls. Is 
>>there
>>    
>>
>a
>  
>
>>cheap software package out there for doing this for mgcp/sccp?  I know
>>if evern cut over to * there is a way but I doubt I will even cut 100% 
>>over
>>    
>>
>to
>  
>
>>* so I was wonder what the list has heard of for call recording via
>>    
>>
>sniffing
>  
>
>>my gates.  I know there are some out there but $100k for 40 users is
>>to
>>    
>>
>high
>  
>
>>for my blood.
>>
>>Offlist is fine for all flames and answers since this is a bit off
>>topic lists at efastfunding.com
>>
>>OK it's a Monday when it takes 5 tries to get a email to the right
>>list
>>    
>>
>from
>  
>
>>the right account.
>>
>>Either that or someone switched the coffee pot to decaf again.
>>
>>
>>_______________________________________________
>>Asterisk-Users mailing list
>>Asterisk-Users at lists.digium.com 
>>http://lists.digium.com/mailman/listinfo/asterisk-users
>>To UNSUBSCRIBE or update options visit:
>>   http://lists.digium.com/mailman/listinfo/asterisk-users
>>
>>    
>>
>
>_______________________________________________
>Asterisk-Users mailing list
>Asterisk-Users at lists.digium.com
>http://lists.digium.com/mailman/listinfo/asterisk-users
>To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
>_______________________________________________
>Asterisk-Users mailing list
>Asterisk-Users at lists.digium.com
>http://lists.digium.com/mailman/listinfo/asterisk-users
>To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
>
>_______________________________________________
>Asterisk-Users mailing list
>Asterisk-Users at lists.digium.com
>http://lists.digium.com/mailman/listinfo/asterisk-users
>To UNSUBSCRIBE or update options visit:
>   http://lists.digium.com/mailman/listinfo/asterisk-users
>
>  
>