Packet Capture IP Phone 7912

[sdvandeslunt]

I'd like to intercept packets from my Cisco IP Phone 7912 series to my PC (plugged into the phone's PC port). What do I have to do in order to capture the phone's output at a packet level?

Thanks. -Scott

[sequan_01]

you could use ethereal software on your pc. or span the phone port to another port on the switch where the pc is connected and run ethereal on the pc.

[sdvandeslunt]

I have Ethereal installed with WinPCap... but for some reason its not actually grabbing any packets from the phone. I'm thinking there is a setting on the phone (maybe?) to allow a "leaky" port? I don't know. I could swear I've done this before...

[sequan_01]

you could try uninstalling and reinstalling ethereal. it should work fine.

[sdvandeslunt]

I'll try that and let you know. The software does seem to be capturing my local packets no problem though...

[jcoke]

That feature is not available on the 7912. On the older phones (7940, 7960 etc.) set "PC Voice VLAN Access" to Enabled. Newer phones (7941, 7961 etc.) also need "Span to PC Port" set to Enabled.

[fred.s.mollenkopf]

Scott,

John's post is correct to my knowledge. You do have the option of throwing a hub in front of the 7912 and capturing off of that or set a SPAN session on your switch so you can capture the traffic from the switch side.

Please rate any helpful posts

Thanks

Fred

[sdvandeslunt]

[VOID]

[sdvandeslunt]

Sorry about that. Didn't see all the posts listed yet. Okay, so the 7912 has no "leaky packet" option? We run pretty much all CE500 switches here with one 3560 in the middle of the topography. Can I set a span up like that on a CE500 (no CLI...). Otherwise the hub option might work (if I can find one around).

Thanks

-Scott