CODEWITHSUNDEEP
sslsipwiresharkciscocucm
user1884325
user1884325

Reputation: 2550

How do you decrypt SIP over TLS in Wireshark (Cisco UCM 10.5)

I have a Cisco UCM 10.5 running and would like to know how I can decrypt SIP over TLS traffic between phone endpoints and the UCM.

I haven't been able to find a guide that works.

Upvotes: -1

Views: 851

Answers (1)

packetie
packetie

Reputation: 5069

Can you use Wireshark to find out the cipher used. One way to find out is to look at the Server Hello message: see the attached image: here).

If it is not related to Diffie-Hellman (has "DHE" in the cipher suite), then you can decrypt it with server private key by using Wireshark.

Upvotes: 0

Related Questions