View SIP Traffic with Network Capture Tool
Dec 18, 2009 02:51 PM
To troubleshoot or analyze a particular problem, it is often handy to take a closer look at the actual SIP traffic being sent to and from 3CX Phone System or the 3CX VOIP client.
You can check whether SIP traffic is arriving at the server, and thus verify that traffic is not blocked by a firewall on the client or by a firewall sitting in between the server and the VOIP provider
You can check that STUN requests are being made
You can check the exact format of INVITES and other SIP messages sent by your VOIP provider or VOIP gateway
You can view registrations made by phones
In addition, Deerfield Technical support might request that you create a SIP capture to analyze an issue in more detail.
To create a SIP capture:
Download and install a Network Capture tool. In this example we use the free Wireshark tool, which can be downloaded from
Activate the interfaces from the menu. Go to the menu option Capture > Interface
Figure 1 - Select the right interface
Select the network interface on which the traffic is being sent and received (be sure to select the correct one) and click on the start button. Traffic will now be captured.
Enter the term ‘sip’ in the filter edit box in the main screen.
Make a call or reproduce the particular action that you wish to analyze (for example registration with a VOIP provider, or an outbound call via a VOIP provider)
Figure 2 - Wireshark Network Capture tool
You will see the SIP traffic appear in the main window. When done, you can stop the capture and then save the capture from the file menu for future analysis.