[VOIPSEC] Actual Attacks

[David Vincent]

Brian Rosen wrote:

>Are you aware of this actually happening, or is this all theoretic?
>
>I've never heard of actual incidents of any of this.
>
>The latter (eavesdropping) is actually the reverse; when we do testing, we
>have to go through all kinds of grief to allow the sniffers to get at the
>packets.  Someone has to actually bring a hub (not a switch) so we can sniff
>the packets.  You can, of course, run Etherreal on some of the actual
>devices.  It's amazingly hard to sniff packets in a typical switched
>architecture.  When we implement CALEA (legal wiretap), it takes a special
>box that we force all the traffic to go through so we can copy the packets
>to the LEA. 
>  
>

speaking of eavesdropping, i'd love to hear the community's opinion 
about this project:

http://www.enderunix.org/voipong/

-d