Enable SIP Signal Monitoring
A Sidekick deployed on a switch with a mirror port can capture all SIP Signal Data at a location and allow you to export that data into a PCAP file for analysis. The first step is to enable the SIP Signal Monitoring in the Monitoring section of the location dashboard. First, navigate to the Location Dashboard by clicking on the Locations tab, then select the location that you would like to access.
In the Monitoring Panel, select SIP Signal Monitoring, and enable the feature. Once enabled, the Sidekick will begin to capture SIP traffic. It may take some time before data is available to retrieve in the portal as the Sidekick will wait until a file size capacity is reached before uploading the data and making it available to retrieve.
To retrieve SIP Signal Data for a specific device, select the devices’ MAC address from the drop down menu. If the device has more than one EXT, you can also specify which EXT you would like to view data for.
Non-TLS SIP Signal Data
Once your search returns SIP Signal Data, you will see all SIP Signal packets for that specific device. Please note that RTP Media packets are not captured. You can export all the data for the specified time frame to a PCAP file by clicking export to PCAP at the bottom of the table.
You may also choose to double click on any row to view the SIP flows for all packets related to that event or Call ID.
TLS Signal Data
If the Sidekick is monitoring any devices that have TLS enabled, you can export the TLS packets to a pcap file here.