VOIP - VoIP Traffic

Method description

This method detects the VoIP traffic using known pairs of ports and protocols. The practical applicability of the method is strictly limited to a corporate environment and the selected devices and is recommended for detecting the SIP and the H.323 traffic. The method detects network devices that generate standard VoIP traffic.

This method consists of the following submethod:

• General: Reports the usage of VoIP (IP telephony) in the monitored network.

Method configuration

It is recommended to apply this method for explicitly selected IP addresses of an organization whose traffic structure is known or expected. The recommended place for traffic monitoring is the Internet connection line.

Method parameters

There are no additional parameters for this detection method.

Assigned filter

The filter is used for restricting source IP addresses.

Interpretation of results

This method focuses solely on pairs of ports and protocols. If the method is wrongly configured, it can produce a large number of false positives.