I mentioned Cain & Abel already.
But there are other tools as well, see a list at:
http://www.professionalsecuritytester.org/modules.php?name=Web_Links&l_op=vi
ewlink&cid=64
Take care
Clement
Clément Dupuis, CD
President/Security Evangelist/Chief Learning Officer (CLO)
CCCure Enterprise Security & Training Inc.
CISSP, GCFW, GCIA, Security+, CEH, CCSA, MBNS, MBIS, MBHS, CCSE, ACE
Tel: 954 364 8410 (Florida)
Tel: 514 907 1671 (Montreal)
Tel: 418 907 0263 (Quebec)
Fax: 636 773 6328
Maintainer of :
The CISSP and SSCP Open Study Guides Web Site
http://www.cccure.org
The Professional Security Testers Warehouse
http://www.professionalsecuritytesters.org
-----Original Message-----
From: David Eduardo Acosta Rodríguez [mailto:david.acosta@internet-
solutions.com.co]
Sent: Thursday, July 21, 2005 12:57 PM
To: bytesman; Mark Sec
Cc: security-basics@securityfocus.com; pen-test@securityfocus.com;
Voipsec@voipsa.org
Subject: Re: VoIP testing Help
Hi Mark:
Please read
http://www.networkgeneral.com/uploads/Products/20046243991063/whitepaper_i
ntroduction-voip_0305.pdf
In commercial tools, you can use:
http://www.networkgeneral.com/Products_details.aspx?PrdId=20046243991063
<-
Network General Sniffer Voice
http://www.networkgeneral.com/Products_details.aspx?PrdId=20046117180712
<-
Network General InfinityStream
From the InfinityStream description:
" ...Integrated Voice-over-IP
The Voice Option is a value-added package that integrates with
InfiniStream
Network Management to provide additional insights into voice- and
video-over-IP converged traffic. Voice-over-IP (VoIP) Experts
automatically
detect and help resolve key problems seen on VoIP networks-jitter, packet
loss, packet-sequencing errors, and latency. These VoIP Experts and
call-tracking capabilities, along with the traditional Expert system, help
ensure successful VoIP network rollouts while maintaining "toll-quality"
voice and high-quality data for all users..."
Ing. David E. Acosta R.
Security Consultant - CISSP
Internet Solutions Colombia
"The Information Security Experts"
http://www.internet-solutions.com.co
david.acosta@internet-solutions.com.co
Phone (movil):(300)2089961
Phone (office):(091)3120910 ext 17
On 7/21/05, Mark Sec <mark.sec@gmail.com> wrote:
Alo Folks:
Well now we have a audit over VoIP , we need whitepappers, tools ,
links...
the big problem may be are the tools, for example we need "examples"
or "PoC like sniffing over VoIP whith tools tcpdump and Ethereal, how
to convert the traffic to .wav file , Which are the strings over my
shell use tcpdump, opensource and comercial tools.
thanks for all ur help :-)
- Mark
