How to make wireshark filter POST-requests only?
As a network administrator (Cisco switches, work with WAN providers, protocol analysis) I have an "area of responsibility" for the customer's VOIP project. The telecom group has primary responsibility for dial plans, voice mail and the monitoring tools that came with the Avaya system, but the traffic goes over the data network, so at some point I expect to be involved.
QoS has been implemented. I have not yet received any formal training, and most of the training offerings I have seen have had more to do with VOIP administration than data network related issues.
My customer is doing an Avaya VOIP pilot. I am looking at traces in Wireshark to build my troubleshooting skills. I have found much documentation on VOIP, but little that focuses on protocol analysis and how the various protocols work together.
I can see H.323 in the trace, but some packets contain TPKT, Q.931 and H.225 while others do not.
Wireshark Statistics->RTP->Show All Streams shows 15 streams while Statistics->VOIP Calls shows only 1 call.
Can anyone point me at some good sources of information on how to understand VOIP at this level?
Recently I've started to read RFCs of different multicast standards and came out to the question, which is not totally clear for me. I'm trying to compare DVMRP vs PIM-DM routing protocols in order to understand which one is better, which one producing less multicast message while establishing route and during routing process at all. And which one of them is able to produce more sophisticated source tree.
Can you, please help me to figure out the answers for my questions?
I have never worked in an "enterprise" infrastructure group but have been responsible for small networks. WireShark (Ethereal back in the day) always worked for me in those situations. Where is the line drawn on when to crossover? Or is it?