thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Collaboration, Voice & AV · Intermediate

VoIP Eavesdropping

Intercepting voice or video traffic, for example by capturing unencrypted RTP and reconstructing the audio.

Definition

Attackers with network access can use packet capture tools to record RTP streams and replay them, often after ARP spoofing or gaining access to a mirror port. Mitigations include SRTP, TLS for signaling, separate voice VLANs, 802.1X, switch security features such as Dynamic ARP Inspection, and disabling PC port span on phones.

Example

Wireshark's VoIP Calls feature reconstructs an unencrypted G.711 conversation from a packet capture.

Exam tip

SRTP prevents eavesdropping on media; voice VLANs alone do not.

Related terms