Tech

Call PCAP

Published on:

October 14, 2013

Troubleshooting a PBX can be challenging, but the goal is to minimize issues through smart design, like providing NAT traversal solutions for SIP endpoints. When issues arise, it’s essential to have the right tools, such as SIP registration reporting, which notifies administrators of registration issues caused by firewalls or unstable internet connections. Additional tools help with provisioning problems by logging generated files and their history. For call-related issues, the PBX now captures call PCAPs based on trunks or extensions, making it easier to isolate specific problems. TLS and SRTP encryption are also addressed by decoding traffic before sending it to the PCAP subsystem, ensuring accurate timestamps for troubleshooting.

Troubleshooting is an unpleasant necessity when setting up and operating a PBX in the cloud or on customer premises. Our approach is to avoid trouble as much as possible by design, for example, by providing a NAT traversal solution for SIP endpoints. When it comes to trouble, however, it's important to have the necessary tools to find out, quickly, what's going on.

Troubleshooting SIP registrations is relatively simple. By checking out the SIP packets, most cases can be closed quickly. We added registration stability reporting practically from version 1: when an endpoint losses it registration or changes its registration address, the administrator gets an email. This makes it easy to locate buggy firewalls and unstable internet connections. We now have even the overview of how phones are registered in a domain, which very quickly shows where the problems are.

We have also added more and more features for troubleshooting the provisioning process. The PBX writes the generated files into the “generated” folder into the file system; here the administrator can take a look at what the phone has received for provisioning. The latest addition is a history file that shows when each file has been generated.

The most recent addition is the troubleshooting tool for calls. We have seen an increased need to troubleshoot media-related problems with the PBX: this is probably because more and more deployments are happening out there in the “cloud”, where quality of service isn't the same as in the LAN with a PSTN gateway. We have had RTCP-XR reports for many years, and those reports find their way into the MOS graph. They only provide a superficial overview on how users may perceive the overall quality, however, and in real-life PBX operations, the RTCP-XR reports aren'tt enough.

Our old approach to run Wireshark on the system was a good starting point. When you have hosted environments with hundreds of registrations and lots of calls, however, those PCAP files can get huge. What is even worse, though, is that finding the right call is like looking for a needle in a haystack.

In most cases, complaints about call quality affect a certain extension or trunk. Therefore, the PBX records the PCAP for calls based on the trunk or based on an extension. Each calls generates a separate PCAP file; if there are multiple calls that match the capturing criteria, the PBX will write several files accordingly.

Call Pcap

And while we were on it, we also addressed another problem. Recording TLS and SRTP encrypted traffic with Wireshark is difficult by nature. Because the PBX has the security context for both the signaling and the media, it first decodes the traffic before sending it to the PCAP subsystem. Don’t be surprised if you find a SIP packet that was sent over TLS as a UDP packet in the trace - it's just to keep you informed as to what has been sent and received at what time. The RTP time-stamps are critical for the PCAP. In Linux, we are able to retrieve these time-stamps from the networking subsystem for received packets; for sent packets, the PBX takes the current time-stamp and uses it to add the packet to the PCAP file. This must also be done for the other operating systems that don't support retrieving time-stamps from the network subsystem (e.g., Windows). That said, the time-stamps should be good enough to troubleshoot visible and audible problems in the media stream.

Call pcap

The files are put into a directory that depends on the day. Inside the directory, the file name contains the time and the call port number, so it can be easily correlated to the other logs in the system.

The feature is available for all operating systems. This is another distinction from previous releases where PCAP was only available for Linux systems. It is now possible to generate SIP call traces for Windows, MAC, FreeBSD and, of course, the Linux flavors.

The new feature will be available in 5.1.3, with previews available in 5.1.2r.

Latest Articles

View All

Why Vodia is the Ideal PBX for Microsoft Environments

Many organizations rely on Microsoft as the foundation of their daily operations, but their communication systems often exist in parallel rather than in harmony. Vodia closes that gap by bringing telephony into the same environment where teams already work, turning separate systems into one connected structure. This approach removes friction between platforms, simplifies management, and gives IT teams better control and visibility over daily communication. It also creates a more seamless experience for employees, reduces operational overhead, and builds a stronger, more flexible foundation that supports growth, collaboration, and long-term scalability.

October 17, 2025

Vodia to Attend CVxExpo 2025 in Glendale, Arizona

Vodia will be attending CVxExpo 2025 in Glendale, Arizona, from November 3–5. Sales Engineer Eric Altman will be on site to meet with current and prospective partners, demonstrating how Vodia’s PBX solutions can strengthen technology roadmaps for 2026. This year, Vodia highlights new integrations with ActiveCampaign, Freshdesk, HighLevel, Microsoft 365, Microsoft Presence, monday.com, and Odoo Cloud, along with enhanced call center capabilities such as agent activity dashboards, call recordings, and transcription features. Partners and attendees can schedule meetings with Eric to learn more about scalable, feature-rich, and cost-effective telecommunications solutions built for enterprises and SMBs.

October 14, 2025

Enterprise Call Analytics: Real-Time Insights Built Right Into Your PBX

Vodia Enterprise Call Analytics gives businesses comprehensive, real-time insights into every aspect of their call operations. Built natively into the PBX, it delivers live, color-coded dashboards, detailed call records, smart filtering, and exportable data. Enterprises can track key metrics such as answer rates, call volume, peak hours, talk times, and top performers, while also monitoring call quality through integrated MOS scoring. By turning call data into actionable intelligence, Vodia helps organizations optimize team productivity, improve customer experience, manage costs effectively, streamline workflows efficiently, and make smarter, data-driven decisions that contribute directly to revenue, operational performance, and long-term ROI.

October 10, 2025