Internal VOIP Security Assessment Tools Question

[joe999]

Hello,

I am currently running a cisco 2950 for our network. I want to perform an internal audit and I am just wondering what security tools are out there. I was specificly asked if it was possible to record phone call traffic on our asterisk server. Does anyone know of good voip security tools to record sip traffic?

Thanks,
Joe

[no42]

There is a live cd Vipervast http://vipervast.sourceforge.net that should contain all the tools you need.

Also Cain & Able on Windows can do some VOIP stuff.

[joe999]

Thanks for the info midnite,

I don't think I was aware of the vipervast tool, I am downloading that right now. Just curious, if you have any input on capturing voip traffic? I know wireshark has some cool telephony features built into it, do you know of anything better? My main goal is to try to hop to the voip vlan and somehow capture/sniff the network. Regardless, thanks again for the input.

Joe