nerdexam
EC-Council

312-50V9 · Question #68

Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

The correct answer is A. Cain. Cain and Abel includes a dedicated VoIP sniffer module that can capture RTP streams and reconstruct audio conversations from packet captures.

Sniffing

Question

Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

Options

  • ACain
  • BJohn the Ripper
  • CNikto
  • DHping

How the community answered

(49 responses)
  • A
    86% (42)
  • B
    4% (2)
  • C
    2% (1)
  • D
    8% (4)

Why each option

Cain and Abel includes a dedicated VoIP sniffer module that can capture RTP streams and reconstruct audio conversations from packet captures.

ACainCorrect

Cain and Abel provides a VoIP password sniffer and RTP decoder that records and replays voice conversations captured from the network, making it the correct tool for extracting audio from a VoIP packet capture. It supports protocols such as SIP and H.323 and can export reconstructed calls as WAV files.

BJohn the Ripper

John the Ripper is an offline password cracking tool and has no capability to parse packet captures or decode VoIP streams.

CNikto

Nikto is a web server vulnerability scanner focused on HTTP/HTTPS enumeration and cannot process or decode network packet captures.

DHping

Hping is a packet crafting and probing utility used for firewall testing and tracerouting; it does not decode or reconstruct VoIP conversations from capture files.

Concept tested: VoIP traffic capture and reconstruction tool selection

Source: https://www.oxid.it/cain.html

Topics

#VoIP#packet capture#Cain#traffic decoding

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice