A method and computer-readable medium for obtaining information associated with a VoIP communication session includes tapping the computer network passively to obtain signaling and media information in a first format, separating the signaling and media information, determining transport information from at least one of the signaling and media information, transcoding the media information to a second format, and storing the transcoded media information in the second format. The media information includes data, voice, audio, and/or video information. A system obtain information associated with a VoIP communication session on a computer network includes a tapping device to passively tap the computer network to obtain signaling and media information in a first format, a processing device to transcode the media information from the first format to a second format, separate the signaling information from the media information, and determine transport information from at least one of the signaling and media information, and a storage device to store the transcoded media information in the second format.