Help us to improve our website!

We want to inspire you for our UCC solution! To do this, we use cookies to provide you with an optimal and personalised website experience. Clicking on "Accept all" allows us to process this data and share it with third-party providers in accordance with our privacy policy. Here you can also adjust the cookie settings at any time.
Technically necessary cookies
Accept all
Save selection

How do I create a Wireshark trace?


A Wireshark trace of the XPhone server is required for the analysis of AnyDevice and softphone signaling problems or no/one-sided speech intelligibility when using the softphone.

If you have not already done so, install the Wireshark program on the XPhone Connect server.

You can download the latest version of Wireshark here:

Please note that the XPhone Connect Server installation wizard usually installs an npcap driver. This is also offered during the installation of Wireshark, but if there is already a version on the computer, you will be notified. A new installation of the npcap driver is not necessary in this case.

Open Wireshark on the XPhone Connect server. You will be greeted by this interface:


You see now the two interfaces Ethernet and Npcap Loopback Adapter (possibly these are called somewhat differently with you).

If you do not see an interface, try to start Wireshark as administrator.

Then mark the Ethernet interface. If you also want to log the softphone signaling, select also the loopback adapter with pressed CTRL key to mark both interfaces (see video).


In order to record only the relevant packets via Wireshark, a recording filter can be entered in the input field after marking the desired network interfaces.

If you only want to record the SIP signaling and no voice packets, use one of the ports of the SIP connection XCC <-> PBX and, if necessary, one port of the SIP connection XCC <-> XPhone Connect Server (softphone) connection for the softphone signaling.


If you would like to record additional voice packets, e.g. to analyze the voice quality, add the portrange 30000-33000 to the recording filter.

The entire filter is then in our example

port 5068 || port 4901 || portrange 30000-33000

Then (while the cursor is in the input field) press the Enter key to start recording for the selected ports with the recording filter.

Now adjust the behavior. You should be able to find various SIP packets (highlighted in blue) in the upper area.

Important: To stop recording, click on the red square in the upper left corner.

WS Capture

Now save the Wireshark trace via File -> Save.

Subscribe to our Newsletter


Thank you for subscribing. To confirm your subscription, please click the link in your registration email.


An error occured. Please try again.