[VOIPSEC] Mapping SIP networks?

[Shawn Merdinger]

Hello all,

I'm wondering what techniques and tools folks are using to map SIP
networks to determine the routes signaling and media streams are
taking from a SIP user agent.

Some of the tools I've been using with limited success in my research:

1.  Traceroute - http://en.wikipedia.org/wiki/Traceroute
2.  TCPtraceroute - http://michael.toren.net/code/tcptraceroute/
3.  0trace - http://seclists.org/fulldisclosure/2007/Jan/0145.html
4.  SipSak - http://sipsak.org/

Tools I'm looking into:

1.  Nmap using IP options - http://seclists.org/nmap-dev/2006/q3/0052.html
2.  SIP trace route -
http://www1.cs.columbia.edu/~vs2140/projects/sip_tracert/report.html

I would welcome any additional tools, insights or references that
folks have on this topic.

Kindest regards,
--scm

Shawn Merdinger