Is it possible to detect if a H.323 connection (phone call) is up by simple sniffing traffic on an adjacent node?
Share
Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Is it possible to detect if a H.323 connection (phone call) is up by simple sniffing traffic on an adjacent node?
The most effective way seems to sniff all the TCP traffic to 1719 (RAS) and 1720 (H.225 signaling) port. You get signaling with high probability. Other ways are much harder.
Other alternative:
The worst thing you can face is H.235 security with signaling protected. Almost nothing will help you in this case ;).