1 00:00:00,000 --> 00:00:07,774 2 00:00:07,774 --> 00:00:10,830 Ok, welcome back. In our next segment 3 00:00:10,830 --> 00:00:18,364 we will talk about analyzing poor voice quality. 4 00:00:18,364 --> 00:00:22,014 So what consitutes poor quality? 5 00:00:22,014 --> 00:00:27,404 Very simply, if you pick up the phone and you hear 6 00:00:27,401 --> 00:00:33,041 be very teeny or hollow or you hear static, 7 00:00:33,041 --> 00:00:36,320 or you hear anything other than a clear, crisp 8 00:00:36,320 --> 00:00:41,327 quality phone call, then that would constitute poor quality. 9 00:00:41,327 --> 00:00:47,973 As we've mentioned earlier, your data network needs to be pristine. 10 00:00:47,973 --> 00:00:52,131 And quite frankly, when you have issues with voice, 11 00:00:52,131 --> 00:00:56,665 a lot of times, the knee jerk reaction is 12 00:00:56,665 --> 00:01:03,878 to start looking into possible issues with the voice configurations in the voice system. 13 00:01:03,892 --> 00:01:08,003 But in reality, the data network also plays very closely. 14 00:01:08,003 --> 00:01:11,401 So, I can give you an example with a port mismatch 15 00:01:11,401 --> 00:01:15,407 from a phone hanging off a PC, a PC hanging off a phone, 16 00:01:15,407 --> 00:01:19,384 an incorrect speed and duplex settings. 17 00:01:19,384 --> 00:01:25,534 Something as simple as that is going to cause you a tremendous issue with quality 18 00:01:25,534 --> 00:01:32,372 and you would have to correct that network data link layer issue 19 00:01:32,370 --> 00:01:36,566 instead of going and starting to mess with QoS and all that other stuff 20 00:01:36,566 --> 00:01:42,959 where really the underlying problem causing the poor quality was in fact the data network. 21 00:01:42,959 --> 00:01:47,349 So just remember that when you're troubleshooting this stuff 22 00:01:47,356 --> 00:01:51,904 that you're going to be looking not only at the voice but also at the data network. 23 00:01:51,904 --> 00:01:56,858 And how can Wireshark help? Well, it can analyze the flow of calls 24 00:01:56,858 --> 00:02:01,286 which we will look at specifically. We can look at the voice calls. 25 00:02:01,286 --> 00:02:06,560 We can reconstruct them in the player and we can take a look and see what's going on. 26 00:02:06,560 --> 00:02:11,929 So, that being said, you will also be able to analyze the response time 27 00:02:11,929 --> 00:02:16,558 in the packets list or the flow graph and use the Expert to really 28 00:02:16,558 --> 00:02:19,344 get an understanding of what could be happening here. 29 00:02:19,344 --> 00:02:24,241 An example, or another example is you may have hair-pinning on a network device. 30 00:02:24,241 --> 00:02:29,920 This may cause voice to only work in a, in a certain direction correctly. 31 00:02:29,920 --> 00:02:35,814 Incorrectly configured QoS causing queuing issues, 32 00:02:35,814 --> 00:02:40,022 that can also play a large role into quality. 33 00:02:40,022 --> 00:02:48,016 Not giving yourself enough of a buffer for voice or prioritizing it incorrectly. 34 00:02:48,012 --> 00:02:55,683 You can experience jitter which comes down to, you can have latency in your network. 35 00:02:55,683 --> 00:03:06,807 That will cause extreme poor quality and you can also see issues with packets being dropped. 36 00:03:06,807 --> 00:03:13,648 And if packets are being dropped or re-transmitted, that can also cause poor quality. 37 00:03:13,648 --> 00:03:19,397 And what's really good is that Wireshark once you place correctly and capture the data 38 00:03:19,397 --> 00:03:24,566 will start to give you some insight into what you can see. 39 00:03:24,566 --> 00:03:34,013 So up on the screen we have the call and to get to that we go to the 40 00:03:34,002 --> 00:03:38,162 telephony menu and we pull voice calls or I should say, VOIP calls. 41 00:03:38,162 --> 00:03:43,068 And if we want to take a look, we can pull up the player 42 00:03:43,068 --> 00:03:46,379 and decode it and then we can see specifically 43 00:03:46,379 --> 00:03:49,870 what exactly was taking place during this call. 44 00:03:49,870 --> 00:03:51,870 Now, why is this helpful? 45 00:03:51,870 --> 00:03:58,911 For those of you that are familiar with audio concepts, this looks very much like as if 46 00:03:58,919 --> 00:04:02,505 you were recording something in pro-tools or a tool of that nature. 47 00:04:02,497 --> 00:04:07,961 It's essentially the same thing and when you look at it, it will tell you over time 48 00:04:07,963 --> 00:04:13,004 exactly what was taking place and, and the quality of the calls. 49 00:04:13,012 --> 00:04:17,364 So obviously, if it's a smaller wave, it's more quiet or less, 50 00:04:17,364 --> 00:04:21,678 and if it's a bigger wave, it's louder or more. 51 00:04:21,678 --> 00:04:24,472 And then you could also suffer from similar things 52 00:04:24,472 --> 00:04:30,072 like if you are clipping or you have distortion, you have enough space or head room. 53 00:04:30,072 --> 00:04:32,922 But a lot of these things come into play 54 00:04:32,922 --> 00:04:37,169 when you pull up the RTP player and you can view these problems. 55 00:04:37,194 --> 00:04:39,531 So, that being said, 56 00:04:39,539 --> 00:04:45,681 just be aware if you're using this player, it's also a security concern. 57 00:04:45,686 --> 00:04:48,813 You can, yes, replay calls that you've captured 58 00:04:48,812 --> 00:04:55,369 which is probably a concern of those who were using the network. 59 00:04:55,369 --> 00:05:00,219 So just be aware that you have to consider security here as well, 60 00:05:00,225 --> 00:05:08,328 because this will be a violation of security if you open up someone's call and listen to it. 61 00:05:08,328 --> 00:05:12,184 So Wireshark, once you captured the data 62 00:05:12,184 --> 00:05:17,175 and then you start putting it into the tools in the telephony menu, such as VOIP calls 63 00:05:17,175 --> 00:05:20,661 will allow you to see the quality of the call. 64 00:05:20,661 --> 00:05:24,902 You'll be able to see some issues with it. You can open up the flow graph. 65 00:05:24,911 --> 00:05:27,762 And you could see if packets are being re-transmitted 66 00:05:27,761 --> 00:05:31,948 or if your underlying protocols are having an issue. 67 00:05:31,948 --> 00:05:37,110 And also with RTP, you can check for, 68 00:05:37,110 --> 00:05:40,964 you could do stream analysis and you could check for out-of-order packets, 69 00:05:40,964 --> 00:05:46,553 or any other issues that are happening with RTP while you're doing your analysis. 70 00:05:46,553 --> 00:05:50,115 And you could look at the RTP stream analysis, 71 00:05:50,115 --> 00:05:52,954 both in forward and reversed direction 72 00:05:52,954 --> 00:05:55,720 and see specifically how many packets, 73 00:05:55,720 --> 00:05:58,884 what the delta is in between the packets, 74 00:05:58,884 --> 00:06:03,313 if you're experiencing jitter, and so on and so forth. 75 00:06:03,313 --> 00:06:07,378 So this could be really helpful and it also provides the summary 76 00:06:07,378 --> 00:06:13,779 for you to give you the max amount of jitter experienced during the call as an example, 77 00:06:13,776 --> 00:06:18,711 and the duration of the call, as well as the max delta. 78 00:06:18,711 --> 00:06:23,893