[Freeswitch-users] Bounty for - FS-4268 Sip trace with filter for IP or extension

Tue Jan 8 02:21:19 MSK 2013

>From previous experience in web development, I know that sometimes the most
obvious way isn't the right way.

So, until I've tried it myself, I really can't say whether or not having
the packets with the CDRs would be the right/wrong thing to do.

However, HOMER on a switch port mirror looks very interesting - thank you
for this recommendation.

I'm going to be spending some time looking into all these different
approaches, then I'll post back once I'm a bit more exposed to it.

Really appreciate the feedback from everyone on this

Cal

On Mon, Jan 7, 2013 at 9:46 PM, Steven Ayre <steveayre at gmail.com> wrote:

> I have.
>
> Personally I use my own custom daemon that simply uses libpcap to
> capture and logs packets on port 5060/5080 to pcap files rotated on
> time/size limits which're stored for N days then deleted by a cronjob.
>
> I agree a separate project is probably a good way to log the SIP traffic...
>
> Cal, a project like Homer allows you to capture the SIP traffic from a
> separate server on the same LAN segment or using a monitor port of a
> managed switch. That offloads the SIP capture entirely away from the
> CPU/Disk of the SIP server, which can have performance benefits for
> your softswitch server. Additionally using a pcap file format can have
> other benefits, since it allows you to use existing tools like
> wireshark for analysis. Searching for a call in a pcap file is trivial
> using the Call-ID header which you'll have in the sip_call_id channel
> variable.
>
> That said, the idea of storing a history of the received SIP packets
> within the CDR itself is interesting and would have benefits on
> simpler installs such as a small office PBX - although I wouldn't
> necessarily do it by default.
>
> -Steve
>
>
>
> On 7 January 2013 21:16, Anthony Minessale <anthony.minessale at gmail.com>
> wrote:
> > have you seen the homer project?
> >
> >
> > On Mon, Jan 7, 2013 at 3:03 PM, Steven Ayre <steveayre at gmail.com> wrote:
> >>
> >> Current logging is the Sofia-SIP stack calling the sofia.c:logger()
> >> callback for the transport log. At this level packets are not attached
> >> to any call, so matching it to a call would require a 2nd parsing of
> >> the packet and matching it based on Call-ID... it would be quite a
> >> performance hit.
> >>
> >> The callback functions where mod_sofia handles a packet matched to a
> >> call receives the packet from the Sofia-SIP stack via the sip_t data
> >> structure. This contains the parsed message, not the raw packet. This
> >> makes it unsuitable for logging. I'm not sure if any other parameters
> >> passed to the callback contain the raw packet, which would be required
> >> to implement the feature. One of the mod_sofia developers would have a
> >> better grasp of the Sofia-SIP API though.
> >>
> >> -Steve
> >>
> >>
> >>
> >>
> >>
> >>
> >> On 7 January 2013 20:40, Lloyd Aloysius <lloyd.aloysius at gmail.com>
> wrote:
> >> > I saw a demo from siproutes carrier. Their cdr have sip trace for
> every
> >> > record and they keep for three months , then archive.
> >> >
> >> > It is awesome if freeswitch attach sip trace to the cdr. May be we can
> >> > setup
> >> > a bounty for this.
> >> >
> >> >
> >> >
> >> >
> >> >
> >> > On Mon, Jan 7, 2013 at 9:17 AM, Saugort Dario Garcia Tovar
> >> > <dgarcia at anew.com.ve> wrote:
> >> >>
> >> >> Hi Cal,
> >> >>
> >> >> Also I use this way to get a sip trace with filter criterias. Take a
> >> >> look
> >> >> to this link:
> >> >>
> >> >>
> >> >>
> >> >>
> http://www.jonathanmanning.com/2009/10/26/how-to-voip-sip-capture-with-tcpdump-on-linux/
> >> >>
> >> >> With Wireshark you can apply additional filter
> >> >>
> >> >>
> >> >>
> >> >> On 1/6/2013 3:31 PM, Cal Leeming [Simplicity Media Ltd] wrote:
> >> >>
> >> >> Could a core dev speculate on how much the expected bounty would be
> for
> >> >> this?
> >> >>
> >> >> Thanks
> >> >>
> >> >> Cal
> >> >>
> >> >>
> >> >>
> >> >>
> _________________________________________________________________________
> >> >> Professional FreeSWITCH Consulting Services:
> >> >> consulting at freeswitch.org
> >> >> http://www.freeswitchsolutions.com
> >> >>
> >> >> 
> >> >> 
> >> >>
> >> >> Official FreeSWITCH Sites
> >> >> http://www.freeswitch.org
> >> >> http://wiki.freeswitch.org
> >> >> http://www.cluecon.com
> >> >>
> >> >> FreeSWITCH-users mailing list
> >> >> FreeSWITCH-users at lists.freeswitch.org
> >> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> >>
> >> >> UNSUBSCRIBE:
> http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> >> http://www.freeswitch.org
> >> >>
> >> >>
> >> >>
> >> >> No virus found in this message.
> >> >> Checked by AVG - www.avg.com
> >> >> Version: 2012.0.2221 / Virus Database: 2637/5476 - Release Date:
> >> >> 12/21/12
> >> >> Internal Virus Database is out of date.
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> Atentamente,
> >> >> Dario García
> >> >> Consultor.
> >> >>
> >> >> CCCT, Nivel C2, Sector Yarey, Mz,
> >> >> Ofc. MZ03a.
> >> >> Caracas-Venezuela.
> >> >> Teléfono: +58 212 9081842
> >> >> Cel: +58 412 2221515
> >> >> dgarcia at anew.com.ve
> >> >> http://www.anew.com.ve
> >> >>
> >> >>
> >> >>
> _________________________________________________________________________
> >> >> Professional FreeSWITCH Consulting Services:
> >> >> consulting at freeswitch.org
> >> >> http://www.freeswitchsolutions.com
> >> >>
> >> >> 
> >> >> 
> >> >>
> >> >> Official FreeSWITCH Sites
> >> >> http://www.freeswitch.org
> >> >> http://wiki.freeswitch.org
> >> >> http://www.cluecon.com
> >> >>
> >> >> FreeSWITCH-users mailing list
> >> >> FreeSWITCH-users at lists.freeswitch.org
> >> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> >>
> >> >> UNSUBSCRIBE:
> http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> >> http://www.freeswitch.org
> >> >>
> >> >
> >> >
> >> >
> >> >
> _________________________________________________________________________
> >> > Professional FreeSWITCH Consulting Services:
> >> > consulting at freeswitch.org
> >> > http://www.freeswitchsolutions.com
> >> >
> >> > 
> >> > 
> >> >
> >> > Official FreeSWITCH Sites
> >> > http://www.freeswitch.org
> >> > http://wiki.freeswitch.org
> >> > http://www.cluecon.com
> >> >
> >> > FreeSWITCH-users mailing list
> >> > FreeSWITCH-users at lists.freeswitch.org
> >> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> > UNSUBSCRIBE:
> http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> > http://www.freeswitch.org
> >> >
> >>
> >>
> _________________________________________________________________________
> >> Professional FreeSWITCH Consulting Services:
> >> consulting at freeswitch.org
> >> http://www.freeswitchsolutions.com
> >>
> >> 
> >> 
> >>
> >> Official FreeSWITCH Sites
> >> http://www.freeswitch.org
> >> http://wiki.freeswitch.org
> >> http://www.cluecon.com
> >>
> >> FreeSWITCH-users mailing list
> >> FreeSWITCH-users at lists.freeswitch.org
> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> >> UNSUBSCRIBE:
> http://lists.freeswitch.org/mailman/options/freeswitch-users
> >> http://www.freeswitch.org
> >
> >
> >
> >
> > --
> > Anthony Minessale II
> >
> > FreeSWITCH http://www.freeswitch.org/
> > ClueCon http://www.cluecon.com/
> > Twitter: http://twitter.com/FreeSWITCH_wire
> >
> > AIM: anthm
> > MSN:anthony_minessale at hotmail.com
> > GTALK/JABBER/PAYPAL:anthony.minessale at gmail.com
> > IRC: irc.freenode.net #freeswitch
> >
> > FreeSWITCH Developer Conference
> > sip:888 at conference.freeswitch.org
> > googletalk:conf+888 at conference.freeswitch.org
> > pstn:+19193869900
> >
> > _________________________________________________________________________
> > Professional FreeSWITCH Consulting Services:
> > consulting at freeswitch.org
> > http://www.freeswitchsolutions.com
> >
> > 
> > 
> >
> > Official FreeSWITCH Sites
> > http://www.freeswitch.org
> > http://wiki.freeswitch.org
> > http://www.cluecon.com
> >
> > FreeSWITCH-users mailing list
> > FreeSWITCH-users at lists.freeswitch.org
> > http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> > UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> > http://www.freeswitch.org
> >
>
> _________________________________________________________________________
> Professional FreeSWITCH Consulting Services:
> consulting at freeswitch.org
> http://www.freeswitchsolutions.com
>
> 
> 
>
> Official FreeSWITCH Sites
> http://www.freeswitch.org
> http://wiki.freeswitch.org
> http://www.cluecon.com
>
> FreeSWITCH-users mailing list
> FreeSWITCH-users at lists.freeswitch.org
> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
> http://www.freeswitch.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20130107/add035cc/attachment.html 