VOIP Security

[snaw]

No I'm not "Cherry Picking", I've developed VoIP software for Mitel, ADP Communications and Siemens Nixdorf.

In your posts you're mentioning a complete DOS of the network. I'm answering the original posters questions by detailing what can be done to selectively target the VoIP functionality on a network.

With regards to QOS, not many "rendering" devices (Phones) actually utilise RTCP correctly, as mentioned in my previous posts. I also mention G711 (I could've mentioned G729 or any number of other CODECS but I think you'll find that G729 and G711 are the most common) because it's possible to inject audio into an already established SIP session.

Are you being deliberately antagonistic?

Nah, just messing with you.

Guess it's all about perspective. You're a developer and clearly see it through those eyes - I'm coming at it from the infrastructure side and have a slightly different slant.

For me the biggest security risk is the access to the physical port part, or packet capture/call replay not injecting audio into a SIP conversation - btw don't recall him specifically mentioning SIP, as opposed to say MGCP etc - same with CODEC, he's talking about password on the phone, the CODEC isn't really that big a deal vis-a-vis VOIP security.

Not being antagonistic, just bored and picking a few holes in your statements. Plus happen to be doing a fair bit of VOIP at the moment so it's kind of topical for me.

[Churchill]

Nah, just messing with you.

Guess it's all about perspective. You're a developer and clearly see it through those eyes - I'm coming at it from the infrastructure side and have a slightly different slant.

For me the biggest security risk is the access to the physical port part, or packet capture/call replay not injecting audio into a SIP conversation - btw don't recall him specifically mentioning SIP, as opposed to say MGCP etc - same with CODEC, he's talking about password on the phone, the CODEC isn't really that big a deal vis-a-vis VOIP security.

Not being antagonistic, just bored and picking a few holes in your statements. Plus happen to be doing a fair bit of VOIP at the moment so it's kind of topical for me.

Holes?

How very dare you.

[Moscow Mule]

Mods! Mods!

On the basis that I haven't got a Scooby Do what these two are on about - can this be moved to Technical please...

[DodgyAgent]

Nah, just messing with you.

Guess it's all about perspective. You're a developer and clearly see it through those eyes - I'm coming at it from the infrastructure side and have a slightly different slant.

For me the biggest security risk is the access to the physical port part, or packet capture/call replay not injecting audio into a SIP conversation - btw don't recall him specifically mentioning SIP, as opposed to say MGCP etc - same with CODEC, he's talking about password on the phone, the CODEC isn't really that big a deal vis-a-vis VOIP security.

Not being antagonistic, just bored and picking a few holes in your statements. Plus happen to be doing a fair bit of VOIP at the moment so it's kind of topical for me.

What is a codec?

DA in "trying to learn" mode

[Kinvara]

Mitel!!!

[Jog On]

Could there be an issue of access to the company phone book and social engineering attack implications?

[snaw]

What is a codec?

DA in "trying to learn" mode

EnCOder/DECoder - CODEC. Simply analog to digital conversion, and back again. Different ones compress at different rates - with resulting differential in packet size. Ties in to voice quality somewhat as well. Fine tuned to fit in with our perceptible audio range.

Then there's video codecs/ stuff for fax etc which has different requirements - but we're talking specifically voice ones, so mainly down to how big the pack size is, versus voice quality etc.

That help?

[Churchill]

EnCOder/DECoder - CODEC. Simply analog to digital conversion, and back again. Different ones compress at different rates - with resulting differential in packet size. Ties in to voice quality somewhat as well. Fine tuned to fit in with our perceptible audio range.

Then there's video codecs/ stuff for fax etc which has different requirements - but we're talking specifically voice ones, so mainly down to how big the pack size is, versus voice quality etc.

That help?

Now tell him about "Comfort Noise"...

[snaw]

Now tell him about "Comfort Noise"...

Nah, your turn.

Starts getting all twisty for me as soon as you get into all that VOIP tuning stuff: input gain, output attenuation and impedance ... makes my brain hurt.

[DodgyAgent]

EnCOder/DECoder - CODEC. Simply analog to digital conversion, and back again. Different ones compress at different rates - with resulting differential in packet size. Ties in to voice quality somewhat as well. Fine tuned to fit in with our perceptible audio range.

Then there's video codecs/ stuff for fax etc which has different requirements - but we're talking specifically voice ones, so mainly down to how big the pack size is, versus voice quality etc.

That help?

It certainly does, thank you snaw