312-50V9 · Question #68
Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?
The correct answer is A. Cain. Cain and Abel includes a dedicated VoIP sniffer module that can capture RTP streams and reconstruct audio conversations from packet captures.
Question
Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?
Options
- ACain
- BJohn the Ripper
- CNikto
- DHping
How the community answered
(49 responses)- A86% (42)
- B4% (2)
- C2% (1)
- D8% (4)
Why each option
Cain and Abel includes a dedicated VoIP sniffer module that can capture RTP streams and reconstruct audio conversations from packet captures.
Cain and Abel provides a VoIP password sniffer and RTP decoder that records and replays voice conversations captured from the network, making it the correct tool for extracting audio from a VoIP packet capture. It supports protocols such as SIP and H.323 and can export reconstructed calls as WAV files.
John the Ripper is an offline password cracking tool and has no capability to parse packet captures or decode VoIP streams.
Nikto is a web server vulnerability scanner focused on HTTP/HTTPS enumeration and cannot process or decode network packet captures.
Hping is a packet crafting and probing utility used for firewall testing and tracerouting; it does not decode or reconstruct VoIP conversations from capture files.
Concept tested: VoIP traffic capture and reconstruction tool selection
Source: https://www.oxid.it/cain.html
Topics
Community Discussion
No community discussion yet for this question.