The document discusses complaints regarding the quality of a VoIP service, suggesting that monitoring was done using Wireshark and Nmap, which did not reveal issues. It highlights a conversation about the limitations of using span ports for monitoring and emphasizes that a network tap is necessary for accurate data capture. The key takeaway is the importance of using the correct technology to ensure complete data visibility and quality in network communications.

1. TAPToons

2. Sr.Engineer
NetworkNewbie
Hmm,
howdidyougetthedata?
...letmetakealook.
HeyJacob,IamgettingcomplaintsaboutthequalityofourvoiceoverIPservice.
WiresharkandNmaparen’tshowinganythingoutoftheordinary.Anyideas?

3. Wait,arewenotusingaTAP?WhatisfeedingtheVoIPmonitors?
No,straightfromtheSPANports

4. Oh,youknowwecan’tdothatright?Weprobablyneedtoaddthis
toourbestpracticepolicyforcriticallinks.

5. 0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 Oxid8e (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 192.9.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
1.000123000 14 0.000009000 50.69.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 Oxid8d (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 50.69.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
1.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 0.000009000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
1.000123000 14 0.263369000 192.9.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
Filter:
0.000123000 14 0.000009000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
1.000123000 14 0.263369000 192.9.197.201 192.192.1.112 80 63009 TCP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
0.000123000 14 0.263369000 50.69.197.201 192.192.1.112 80 63009 HTTP 60 65569 1 290 Oxidie (7454) 227 80>69003[ACK].
File Edit View Go Capture Analyze Statistics Telephony Tools Internals Help
TransmissionControlProtocol,SrcPort:60045(60045),OstPort80(80).Seq1,Ack:1,Len:269
Destinationport:80(80)
(Streamindex:14)
SequenceNumber:1
Flags:0x018(PSH,ACK)
000.................=Reserved
...0................=Nonce:NotSet
0000C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0010C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0020C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0030C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0040C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0050C8d71921b7ec001C2599db8500 ...!.....#......%..&...
0060C8d71921b7ec001C2599db8500 ...!.....#......%..&...0060C8d71921b7ec001C2599db8500 ...!.....#......%..&...See,thisisn’trealtimedata,I’mseeingdroppedframes,
out-of-linepackets,thisisn’taccuratedataflowRob.

6. Maybeinbizzaroworld.YouknowCiscojustmadethemto
QAtestinmanufacturingright?
....SoIguessSPANisn’talwaysbestpractice?

7. Nexttime,justremember....anetworkTAP
providesonehundredpercentofthedata!
Igotit,Igotit....
SPANbad....TAPgood

8. T E C H N O L O G Y
Seeeverybit,byteandpacket
®
Formorevisit:GarlandTechnology.com