VoIP

This chapter describes the dashboards on the VoIP tab to communicate with the DANZ Monitoring Fabric Controller. It includes the following section.

SIP

The SIP dashboard provides information about SIP responses, call attempts and call events.

The dashboard displays the following panel:
  • Status Code: Displays a pie chart of SIP response code distribution over a selected time range, using counts of each sip.code value to highlight the most frequent responses.
  • Health Over Time: Displays the count of SIP transactions labeled as OK and Error over a selected time range, helping monitor SIP responses' success and failure trends based on filtered query strings.
  • Top Calls (+caller, +callee): Displays the number of SIP call attempts grouped by caller and callee over a selected time range, allowing you to analyze the top calling pairs based on activity volume.
  • SIP Details (+sip, +dip to retrieve packets): Displaysa detailed table of SIP call events over a selected time range, showing fields such as timestamp, caller, callee, SIP status, and IP information to help analyze SIP request and response activity.
Figure 1. VoIP > SIP Dashboard

Analyzing SIP and RTP

This feature describes how Session Initiation Protocol (SIP) packets are parsed in a DANZ Monitoring Fabric (DMF) Analytics Node deployment and presented in a dashboard to allow the retrieval of data packets conveying voice traffic (RTP) from the DMF Recorder Node (RN). DMF accomplishes this by showing logical call information such as the call ID, phone number, and username. After retrieving the SIP record, the associated IP addresses are used to retrieve packets from the RN and opened in Wireshark for analysis.

Kibana has the SIP dashboard.
Figure 2. SIP Dashboard

DMF Preconditions

The feature requires a physical connection from the DMF Delivery Switch to the 10G Analytics Node (AN) Collector interface.
  • Policy configured to filter for SIP traffic (UDP port 5060) such that low-rate traffic (< 1Gbps) is delivered to AN via collector interface with a filter on the Layer 4 port number or User Defined Field (UDF).
  • LAG will send SIP Control Packets to 1, 3, and 5 AN Nodes with symmetric hashing enabled and without hot-spotting.
  • Recorder Node to receive SIP and Control packets recorded with standard key fields.

Configuration

Configure SIP using the broker_address, timestamp-field, and field_group to enable the feature. Refer to Topic Indexer for more information on broker_address.

Figure 3. Edit-topic indexer

Limitations

The Analytic Node DMF 8.5.0 release supports this feature.
  • There is no toggle switch to turn this feature on or off.