Chat with our sales team
Whole Network Most Recent TOP10 Companies Industry News New Application skype

 

VoIP Can Be Sniffed? Get Real!

Filed in archive Dangers by Dameon Welch-Abemathy on November 27, 2007

27354585.jpg
This mass hysteria about being able to make WAV files of VoIP conversations, while only recently brought into the forefront with a tool called SIPtap, is completely unwarranted. In short: if someone can run this tool on your network and make WAV files of your phone calls, you've got far bigger problems.

Back in March of 2004, I wrote a fairly detailed piece for Voxilla about VoIP and security issues. There are several things I did not cover in this rather lengthy article, reading back on it now, but some things remain true with SIP. More after the jump.


Even if you don't employ encryption for either the call control information or the voice channel, here's the real truth: Unless you can somehow see all the traffic between the two parties, you can't sniff a VoIP call. And you know what? That's difficult to do. As I wrote in 2004:

In order to actually intercept the call setup or voice data for an in-progress SIP call, you have to be at a location where the call is traveling through, either at the telephone service provider or the ISP. Since it's possible for a connection to change routes midstream, there are only a couple of points where it is practical to intercept a SIP call: On either the SIP client or proxy's premises, or at the ISP used by either endpoint. This isn't unique to SIP: a PSTN call can be intercepted in similar locations.


If you're looking for more meat, Mr Blog's got it.

Bottom line: This SIPtap thing is overblown. Not only is it infeasible to employ, it can easily be worked around by employing encryption. What do you think?

Advertisement


Permalink: VoIP Can Be Sniffed? Get Real!
Tags: voip+security  siptap  voip  2007  call  sniffed+real  voip+sniffed  openads+delivery 

Trackback: http://www.creative-weblogging.com/cgi-bin/mt-tb.pl/103802



Advertisement


Advertisement


CW ToolbarInstall
RSSrss   | See all blog subscribe options
Googlegoogle   |   What is RSS?
Yahoo!yahoo
AddthisAddThis Feed Button
BloglinesBloglines
Newsletter
Advertisement - Book yours here.

Use our search feature to look for other interesting posts

Just this blog Whole network
Blue Nile, Inc.
Advertisement -
Book yours here..


 
  • Would you like to see your text link here? Let us know!
Advertisement
Book yours here.



  • Testimonials

  • 'Yours is the one blog most tightly aligned with my interests, most "great articles" from my point of view'

    'Cool site!'

    'Great information especially nowadays where the development is amazingly fast.'

    I find it very creative and with unique news, which I think is great compared to some other blogs that just copy other blog's content.
    Rodrigue Ullens, Voxbone
  • Other blogs in the same channel in the Creative Weblogging Network

Advertisement -
Book yours here..






Advertisement - Book yours here..
 
Tagcloud: Calling plans Companies Conferences Dangers Development Tools General Hardware Industry News Interviews IP Business Phone New Application Podcasts privacy skype sponsored posts Terminal