Full Disclosure mailing list archives

Re: Anyone know of a application that will decode a SIP VoIP conversa tion?


From: "Larry Roberts" <larryr () netbeam net>
Date: Wed, 8 Oct 2003 13:46:19 -0700

Rich,

There is a tool called Vomit that works with Cisco's IP Phones. I don't see why it wouldn't work with Nortel as well. 
Check out the following link for more info:

http://vomit.xtdnet.nl/

Sincerely,
Larry Roberts
CCIE #7886 (R&S / Security)
  ----- Original Message ----- 
  From: Compton, Rich 
  To: full-disclosure () lists netsys com 
  Sent: Wednesday, October 08, 2003 12:49 PM
  Subject: [Full-disclosure] Anyone know of a application that will decode a SIP VoIP conversa tion?


  I have some colleges at my place of business that are doing SIP over the Internet without encryption and I'd like to 
be able to show them how insecure this is.  I'd like to be able to provide them with some proof by sniffing their 
conversation and replaying it as a .wav file or something.  They are using Nortel clients.  I have been unable to find 
anything in the usual places like packet storm or Google.  Does anyone have any ideas where I could find something like 
this.  I've captured some packets in ethereal and it does decode lots of information but not exactly the shock value 
that I'm looking for.

  Any help would be appreciated!

  -Rich Compton

Current thread: