Tech

PCAP made it

Published on:

July 21, 2015

Once we have the PCAP, finding a problem is becoming almost a pleasure. Because the files are small, and everything is in the same place. It becomes easy to find jitter problems, missing RTP packets and so on. Last week I saw how another external tool took the PCAP idea to the next level. Using an Ethernet switch with port mirroring, all the traffic that hits the PBX also hits the monitoring server, which also sorts the traffic by calls and then puts them into different files. There were nice logs of SIP packets, RTP analysis and other things you want to know about a call.

A few years ago, we have added PCAP recording to the list of features supported by the Vodia PBX. At that time we were just so sick of going through Gigabytes of Wireshark traces that we just added something in the code that does this job based on the associated call. It would save us a lot of time sipping through endless lists of calls that have been recorded over hours of conversations, literally trying to find the needle in the haystack.

Once we have the PCAP, finding a problem is becoming almost a pleasure. Because the files are small, and everything is in the same place. It becomes easy to find jitter problems, missing RTP packets and so on. Last week I saw how another external tool took the PCAP idea to the next level. Using an Ethernet switch with port mirroring, all the traffic that hits the PBX also hits the monitoring server, which also sorts the traffic by calls and then puts them into different files. There were nice logs of SIP packets, RTP analysis and other things you want to know about a call.

There is only one problem when using the port mirror method: Encrypted calls will be invisible there. Because the TLS traffic cannot be intercepted by the monitoring device, it will not be able to figure out which RTP packets belong to which call, and thus not be able to put the whole call together. The PBX can do that, because it has the cryptographic context.

The disadvantage of the PBX recording all the PCAP is performance. It simply takes additional CPU horse power to write the files. The decoding is not so much a problem as it has to be done anyway. But the writing to the file system causes the system some extra work. Compared to the call recording this causes less work, because the PBX does not actually have to look into the media packets.

I can think about two things that the PBX could have in the next version. The first thing is to automatically delete the PCAP files after so-and-so many days, simply to make sure that the system is not eventually running out of disk space. The other thing is to make the PCAP files accessible from the web interface, possibly linked to the CDR records.

Latest Articles

View All

Vodia Now Integrates with Microsoft Teams Presence

Vodia PBX now supports Microsoft Teams Presence, building on its Teams Direct Routing certification and Dynamics 365 integration. Using Graph API from version 69.5.13, a user’s Vodia extension is automatically set to Do Not Disturb when they are on a Teams call. Presence status such as Available, Away, Busy, In a Meeting, or Presenting is matched via the Teams user’s principal username or email, allowing VoIP phones and web portals to show real-time status across devices. This integration connects Teams with a full-featured SIP-compliant PBX, enabling organizations to unify communications, streamline workflows, and support both cloud and on-premise telephony solutions.

August 25, 2025

Why Browser Calling is the Future of Business Communication

Vodia’s browser calling solution allows businesses to make and receive VoIP calls directly from any web browser, eliminating the need for apps or desk phones. It offers convenience, cost savings, and a wide range of features including chat, voicemail, call transfers, conference calls, video calls, and CRM integration. The system is secure, operating entirely within the browser to reduce exposure to malware, and scalable to support remote and hybrid work environments. With easy setup through the Vodia PBX web interface, organizations can streamline communication, improve productivity, and provide employees with a flexible, reliable, and fully integrated business communication experience.

August 13, 2025

Building Intelligent Voice Response Systems with Vodia's JavaScript IVR

JavaScript IVR transforms the way businesses handle incoming calls by enabling fully customizable, intelligent phone menu systems. Unlike static IVR setups with limited, pre-defined options, JavaScript IVR allows you to create dynamic call flows that adapt in real time based on caller input, business data, or even external API integrations. This means you can route calls more efficiently, automate complex processes, and offer highly personalized experiences to your customers. Whether you want to check customer records before transferring a call, adjust menu options based on time of day, or integrate with CRM systems for instant data access, JavaScript IVR gives you the flexibility and control to make it happen - all while improving efficiency and enhancing caller satisfaction.

August 11, 2025