I have never written a UDP probe before.
Does anyone have an idea how to probe for SIP. I know it is UDP on port 5060.
Well I messed with trying to create a sip probe but to get the server to respond you have to send a bunch of stuff and I never got it to respond… I do get my x-lite phone to connect to a Call Manager Express and the header has bunches of stuff in it.
You might figure out how to send OPTIONS request to a sip server, then you could automate finding SIP devices but I looked fairly hard.
Sorry can’t help ATM.
SD
Sweetdude, the problem is in SIP protocol implementation. There are symetric SIP Proxy servers and UA, and asymetric. Symetric respond to SIP request from the same UDP port they receive SIP message (by default 5060), asymetric may respond from any UDP port. In any case, the responce may be generated to the UDP port specified in a SIP signaling message (by default 5060) but not to the source port of initial UDP message.
For example The Dude sends message from random UDP port let it be 10934 (you can never gues), the responce may be generated to port 5060 (or other specified in SIP signaling) and in a case you send message to Cisco the responce will come NOT from port 5060 (because cisco implements asymetric UA and servers), but from port greate then 30000. This packet will be discarded because there responce is expected from port 5060
The only reliable way to monitor SIP for Dude is to monitor using TCP probe (SIP is capable to cary signaling over TCP)