Companion downloads · The VoIP Engineer's Library
Vol I

Network Analysis for VoIP Engineers

Free companion resources for Volume I — annotated pcap library, tuned Wireshark profile, two-page filter cheat sheet, and the lab exercise guide. No account required.

  • Pcap library

    Vol I

    Every annotated .pcap file referenced in the book: six healthy baselines, twenty-eight clean case files (one-way audio, dropped calls, registration failures, codec mismatches, T.38 fax, transfer scenarios, and more), noisy LAN/WAN variants for advanced labs, vantage-point captures showing the same call from three locations, and supporting network-factor captures (QoS, STIR/SHAKEN, ICE, STUN, LLDP). Hand-built in Scapy from documented address ranges (RFC 5737, RFC 7042, RFC 2606) — safe to load, modify, and redistribute.

    voip-analysis-pcaps.zip

  • Wireshark VoIP Analysis profile

    Vol I

    Ready-to-import Wireshark profile. Color rules for SIP requests and responses by class, RTP, RTCP, DTMF, T.38, STUN, DTLS, plus a tuned column layout (with a Delta column for spotting retransmit intervals at a glance) and ~20 pre-loaded display filters in the toolbar dropdown. Drop into your Wireshark profiles directory and switch via Edit > Configuration Profiles.

    VoIP_Analysis_Wireshark_Profile.zip

  • Wireshark VoIP cheat sheet

    Vol I

    Two-page PDF quick reference. Page 1: the most useful Wireshark display filters for SIP / RTP / RTCP / DTMF / T.38 / STUN, filter-syntax cheat, timer-drop reference, and the five-step analysis workflow used throughout the book. Page 2: SIP call-flow ladder for a healthy outbound call, registration flow ladder, SDP anatomy line-by-line, and the RTP header layout field-by-field. Designed to print double-sided on a single sheet.

    wireshark_voip_cheatsheet.pdf

  • Selected labs — hands-on lab guide

    Vol I

    Thirteen structured exercises across every module of Part 3: read a healthy call, diagnose one-way audio, isolate timer-driven drops, decode DTMF, identify codec mismatches, walk a T.38 fax handshake, follow a successful blind transfer. Each lab pairs with a specific pcap, lists learning objectives, and provides answer space. A curated subset of the full pcap library — additional captures are documented in the library README for self-directed exploration, and an expanded lab guide is planned for a future release.

    wireshark_voip_lab_guide.pdf

Capture safety

Every capture in the library is synthetic — hand-built in Scapy from documented address ranges (RFC 5737 for IPv4, RFC 7042 for MAC addresses, RFC 2606 for hostnames). No customer data was ever touched. You can load these into any tool, modify them, and redistribute them freely.

Looking for Vol II resources? Securing VoIP at Every Layer is in development — its companion downloads will ship when the book does.

The VoIP Engineer's Library · Vol I

Don't have the book yet?

These downloads pair with Network Analysis for VoIP Engineers — the book is where the captures, filters, and case files become a structured diagnostic workflow.