[Freeswitch-users] pcapsipdump

Thu Apr 16 23:34:21 MSD 2015

Hi
There is also this tool called Gulp (it does high speed packet capture ):http://staff.washington.edu/corey/gulp/
There are some kernel parameters that help diminish the packet loss at high throughput with small UDP packets (with the cost of adding some delay )
net.core.wmem , net.core.rmem, net.core.optmem_max , net.core.netdev_max_backlog . 
Regards,Dragos 

   From: Regis M <regis.freeswitch.org at tornad.net>
 To: FreeSWITCH Users Help <freeswitch-users at lists.freeswitch.org> 
 Sent: Thursday, April 16, 2015 1:03 PM
 Subject: Re: [Freeswitch-users] pcapsipdump

+1  best tool i've found for the moment...  using only the capture side from years ago.
2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul at mst.edu>:

Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without
the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.

-- Nathan

On 04/15/2015 06:02 PM, Alex Balashov wrote:
> They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
>
> One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another ‎are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
>
> It's a great product, but not for everyone.
>
> --
> Alex Balashov | Principal | Evariste Systems LLC
> 303 Perimeter Center North, Suite 300
> Atlanta, GA 30346
> United States
>
> Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct)
> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>
> Sent from my BlackBerry.
>    Original Message
> From: Nathan Neulinger
> Sent: Wednesday, April 15, 2015 18:50
> To: FreeSWITCH Users Help
> Reply To: FreeSWITCH Users Help
> Subject: Re: [Freeswitch-users] pcapsipdump
>
> Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures.
> The pretty UI is non-free, but the capture engine is useful by itself.
>
> http://sourceforge.net/projects/voipmonitor/
>
> -- Nathan
>
> On 04/15/2015 05:39 PM, Brian West wrote:
>> Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
>>
>> On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov at evaristesys.com <mailto:abalashov at evaristesys.com>> wrote:
>>
>> In my experience, the major problem with this is dealing with calls that span capture chunks.
>>
>> --
>> Alex Balashov | Principal | Evariste Systems LLC
>> 303 Perimeter Center North, Suite 300
>> Atlanta, GA 30346
>> United States
>>
>> Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct)
>> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>>
>> Sent from my BlackBerry.
>> *From: *Brian West
>> *Sent: *Wednesday, April 15, 2015 18:29
>> *To: *FreeSWITCH Users Help
>> *Reply To: *FreeSWITCH Users Help
>> *Subject: *Re: [Freeswitch-users] pcapsipdump
>>
>>
>> Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end
>> of the call, there by saving yourself a little bit of time while extracting the data.
>>
>> On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov at evaristesys.com <mailto:abalashov at evaristesys.com>> wrote:
>>
>>
>> On 04/15/2015 06:13 PM, Brian West wrote:
>>
>>> To solve this, you could run a big ring buffer, load mod_xml_cdr, then
>>> build a wireshark filter out of that data and process the ring buffer,
>>> i've done this before and it works quite well.
>>
>> By ring buffer, do you mean a large amount of tcpdump capture rotations,
>> including options like -C and -W?
>>
>> --
>> Alex Balashov | Principal | Evariste Systems LLC
>> 303 Perimeter Center North, Suite 300
>> Atlanta, GA 30346
>> United States
>>
>> Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct)
>> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>>
>>
>> --
>>
>> */Brian West/*
>> brian at freeswitch.org <mailto:brian at freeswitch.org>
>>
>>
>> */Twitter: @FreeSWITCH , @briankwest/*
>> http://www.freeswitchbook.com
>> http://www.freeswitchcookbook.com
>>
>> ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register
>> <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
>>
>> *T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378)
>> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org <mailto:consulting at freeswitch.org>
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org <mailto:FreeSWITCH-users at lists.freeswitch.org>
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>>
>>
>>
>> --
>>
>> */Brian West/*
>> brian at freeswitch.org <mailto:brian at freeswitch.org>
>>
>>
>> */Twitter: @FreeSWITCH , @briankwest/*
>> http://www.freeswitchbook.com
>> http://www.freeswitchcookbook.com
>>
>> ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register
>> <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
>>
>> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378)
>> *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
>>
>>
>>
>> _________________________________________________________________________
>> Professional FreeSWITCH Consulting Services:
>> consulting at freeswitch.org
>> http://www.freeswitchsolutions.com
>>
>> Official FreeSWITCH Sites
>> http://www.freeswitch.org
>> http://confluence.freeswitch.org
>> http://www.cluecon.com
>>
>> FreeSWITCH-users mailing list
>> FreeSWITCH-users at lists.freeswitch.org
>> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
>> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
>> http://www.freeswitch.org
>>
>

--
------------------------------------------------------------
Nathan Neulinger                       nneul at mst.edu
Missouri S&T Information Technology    (573) 612-1412
System Administrator - Architect

_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

_________________________________________________________________________
Professional FreeSWITCH Consulting Services: 
consulting at freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users at lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.freeswitch.org/pipermail/freeswitch-users/attachments/20150416/08aea3fe/attachment-0001.html 