RE: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread Salvatore Giudice
scussion Subject: Re: [asterisk-users] OT: Capture Asterisk traffic >I think you want: > > tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp dst portrange > 5060-65534 > Thanks tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp and dst portrange 5060-35000 tcpdump: unknown

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread Tzafrir Cohen
On Wed, May 02, 2007 at 08:52:42PM +1200, CSB wrote: > > > >Well, the first thing I notice is that your first tcpdump example is > >listening on eth0, and the second is listening on eth1. > > > >What happens when you do > > > >tcpdump -i eth1 -s 0 -w /tmp/tcpdump.1 > > > >Do you see the RTP traffic

RE: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread Steve Totaro
> -Original Message- > From: [EMAIL PROTECTED] [mailto:asterisk-users- > [EMAIL PROTECTED] On Behalf Of Joe acquisto > Sent: Wednesday, May 02, 2007 6:08 AM > To: Asterisk Users Mailing List - Non-Commercial Discussion > Subject: Re: [asterisk-users] OT: Captur

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread Joe acquisto
. . . > man tcpdump indicates that I should be able to use >= syntax but it > doesn't > work as expected. Any further advice appreciated. > > Cameron When interested in packets, I usually use ethereal and a 4 port hub, plugging the ethereal and asterisk boxs into the hub and uplink the hub to

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread Gordon Henderson
On Wed, 2 May 2007, CSB wrote: Well, the first thing I notice is that your first tcpdump example is listening on eth0, and the second is listening on eth1. What happens when you do tcpdump -i eth1 -s 0 -w /tmp/tcpdump.1 Do you see the RTP traffic then? Thanks That was a typo. Should have

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread CSB
Well, the first thing I notice is that your first tcpdump example is listening on eth0, and the second is listening on eth1. What happens when you do tcpdump -i eth1 -s 0 -w /tmp/tcpdump.1 Do you see the RTP traffic then? Thanks That was a typo. Should have read: The following works: tcpdum

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-02 Thread CSB
I think you want: tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp dst portrange 5060-65534 Thanks tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp and dst portrange 5060-35000 tcpdump: unknown host 'portrange' tcpdump version 3.8 libpcap version 0.8.3 man tcpdump indicates tha

RE: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Salvatore Giudice
lf Of Doug Garstang Sent: Tuesday, May 01, 2007 3:47 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: Re: [asterisk-users] OT: Capture Asterisk traffic I remember an app called 'vomit' that could allegedly reconstruct audio files from tcpdump pcap files. Salvatore Giu

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Doug Garstang
risk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] OT: Capture Asterisk traffic I want to capture all my Asterisk traffic (including RTP) and then analyse it. My plan was to use tcpdump and then analyse with Wireshark. The following works: tcpdump -i eth0 -s 0 -w /tmp/tcpd

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Stephen Bosch
CSB wrote: > I want to capture all my Asterisk traffic (including RTP) and then > analyse it. > > My plan was to use tcpdump and then analyse with Wireshark. The > following works: > tcpdump -i eth0 -s 0 -w /tmp/tcpdump.1 > > But I want to be a bit more selective: > tcpdump -C 100 -W 10 -w /tmp/t

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Andres Paglayan
wireshark can further filter out what you don't want, you can also pipe the dump to "grep" and match only what you want On May 1, 2007, at 11:32 AM, CSB wrote: I want to capture all my Asterisk traffic (including RTP) and then analyse it. My plan was to use tcpdump and then analyse with Wire

Re: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Bruce Reeves
The RTP traffic is not going to be on port 5060, that is the sip only. Check your rtp.conf file in asterisk for the port range used for RTP traffic. On 5/1/07, CSB <[EMAIL PROTECTED]> wrote: I want to capture all my Asterisk traffic (including RTP) and then analyse it. My plan was to use tcpdu

RE: [asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread Salvatore Giudice
) 279-2906 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of CSB Sent: Tuesday, May 01, 2007 1:32 PM To: Asterisk Users Mailing List - Non-Commercial Discussion Subject: [asterisk-users] OT: Capture Asterisk traffic I want to capture all my Asterisk traffic

[asterisk-users] OT: Capture Asterisk traffic

2007-05-01 Thread CSB
I want to capture all my Asterisk traffic (including RTP) and then analyse it. My plan was to use tcpdump and then analyse with Wireshark. The following works: tcpdump -i eth0 -s 0 -w /tmp/tcpdump.1 But I want to be a bit more selective: tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp a