by Anthony Mosco, Robert Smithers, Robert Tarpley

The right tool for the right network

Reviews
Sep 18, 20062 mins

We found that VoIP analysis tools are oriented toward particular VoIP protocol environments such as SIP, H.323, Cisco’s SCCP (also known as “Skinny”). Interpreting different call control protocol sequences is difficult for any one VoIP analysis tool in general because the messages vary considerably with the particular protocol used.

Additionally, there are two main ways of providing VoIP analysis – through real-time monitoring in which data is viewed on the fly or through data-capture processes where data is analyzed after the fact. Real-time monitoring shows current and/or summarized statistics on active VoIP systems and best serves as a sort of security guard, watching over VoIP traffic as it moves across the wire.

Data-capture and analysis methods record network statistics on VoIP traffic and save them for future, detailed review through the use of tools designed to enhance the analysis process. Filters – the selection criteria for catching and storing VoIP data for subsequent analysis – have often provided focus for the examination of the statistics. Most of the products tested here offer a mixture of real-time monitoring and data-capture processes.

VoIP tools can operate in one of two modes. It can be a passive “listener” to your network traffic, gathering statistics in real-time (or near real-time). Or it can monitor the network “actively” by sending out its own packet traffic, gathering and comparing the results of the test transmissions across the network.

Both approaches have advantages and disadvantages. Most of them directly relate to the network the VoIP analysis product will need to monitor. A passive tool adds no overhead to your network while in use and can monitor it for prolonged periods.

An active tool can gauge results precisely by comparing what it knows about the packets it created and transmitted compared with the results captured at the far end of the transmission. The passive monitoring mode is used by ClearSight, Empirix, Fluke OptiView, TouchStone and WildPackets. Fluke’s Visual Uptime Select can operate in both active and passive whereas Apparent is strictly active.


Previous: VoIP analysis tools | Next: How we tested VoIP analysis tools >