<div dir="ltr"><div>Is an i7 desktop fast enough? the RTP extraction was quick (IO bound, likely)</div><div>That second step to convert to .raw... not quick at all.</div><div>-Avi</div><div><br></div><div>core #0:</div><div>
<br></div><div><div>avi@avi-i7 ~ $ cat /proc/cpuinfo </div><div>processor<span class="Apple-tab-span" style="white-space:pre"> </span>: 0</div><div>vendor_id<span class="Apple-tab-span" style="white-space:pre"> </span>: GenuineIntel</div>
<div>cpu family<span class="Apple-tab-span" style="white-space:pre"> </span>: 6</div><div>model<span class="Apple-tab-span" style="white-space:pre"> </span>: 42</div><div>model name<span class="Apple-tab-span" style="white-space:pre"> </span>: Intel(R) Core(TM) i7-2600K CPU @ 3.40GHz</div>
<div>stepping<span class="Apple-tab-span" style="white-space:pre"> </span>: 7</div><div>cpu MHz<span class="Apple-tab-span" style="white-space:pre"> </span>: 3401.000</div><div>cache size<span class="Apple-tab-span" style="white-space:pre"> </span>: 8192 KB</div>
<div>physical id<span class="Apple-tab-span" style="white-space:pre"> </span>: 0</div><div>siblings<span class="Apple-tab-span" style="white-space:pre"> </span>: 8</div><div>core id<span class="Apple-tab-span" style="white-space:pre"> </span>: 0</div>
<div>cpu cores<span class="Apple-tab-span" style="white-space:pre"> </span>: 4</div><div>apicid<span class="Apple-tab-span" style="white-space:pre"> </span>: 0</div><div>initial apicid<span class="Apple-tab-span" style="white-space:pre"> </span>: 0</div>
<div>fpu<span class="Apple-tab-span" style="white-space:pre"> </span>: yes</div><div>fpu_exception<span class="Apple-tab-span" style="white-space:pre"> </span>: yes</div><div>cpuid level<span class="Apple-tab-span" style="white-space:pre"> </span>: 13</div>
<div>wp<span class="Apple-tab-span" style="white-space:pre"> </span>: yes</div><div>flags<span class="Apple-tab-span" style="white-space:pre"> </span>: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm sse4_1 sse4_2 popcnt aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dts tpr_shadow vnmi flexpriority ept vpid</div>
<div>bogomips<span class="Apple-tab-span" style="white-space:pre"> </span>: 6823.99</div><div>clflush size<span class="Apple-tab-span" style="white-space:pre"> </span>: 64</div><div>cache_alignment<span class="Apple-tab-span" style="white-space:pre"> </span>: 64</div>
<div>address sizes<span class="Apple-tab-span" style="white-space:pre"> </span>: 36 bits physical, 48 bits virtual</div><div>power management:</div></div><div><br></div>
<br><br><div class="gmail_quote">On Wed, Mar 6, 2013 at 11:18 PM, Michael Collins <span dir="ltr"><<a href="mailto:msc@freeswitch.org" target="_blank">msc@freeswitch.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br><br><div class="gmail_quote"><div class="im">On Wed, Mar 6, 2013 at 12:11 PM, Avi Marcus <span dir="ltr"><<a href="mailto:avi@avimarcus.net" target="_blank">avi@avimarcus.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Wow, that's a complicated procedure.<div>Identify the IP, then extract the rtp, then convert that to raw audio, then you need to know exactly what type of raw audio to open it.</div><div>By the way, I tried processing a 230mb PCAP.. that last batch with the for loops sucked an entire core and I stopped it after like 15 mins. Payloads was 238mb and the sounds.raw only got up to 53mb before I stopped it.. I don't know how far it would have gotten.</div>
<div><br></div><div>Michael, is there something faster? :)<br clear="all"><div><div dir="ltr"><span style="font-family:Verdana,Arial,Helvetica,sans-serif;font-size:small">-Avi</span><br></div></div>
<br></div></div></blockquote></div><div>Faster processor? :)<br><br>You need to assemble all of those packets, no way around it. I am working on a script to handle that but it's nowhere near ready for public consumption. Believe me, if you only need to get the RTP from a pcap then that procedure is not too difficult. (You could probably have done it in less time than it took to write that email. ;)<br>
<br>I've wrapped that process into a script but I'm trying to handle all the other stuff like getting each stream extracted and then launching sox or the the new-and-improved fs_encode to convert from raw audio to wav file. I'll let everyone know when it is done and put it up on the wiki.<span class="HOEnZb"><font color="#888888"><br>
<br>-MC<br> <br></font></span></div><div><div class="h5"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><br><div class="gmail_quote">On Wed, Mar 6, 2013 at 9:45 PM, Michael Collins <span dir="ltr"><<a href="mailto:msc@freeswitch.org" target="_blank">msc@freeswitch.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
I like that cool Perl script. I'll have to try that some time. In the meantime you can use tshark to extract the rtp and then use sox to turn them into wav files. I'm working on a script to do that automatically, but in the meantime this post should help:<br>
<br><a href="http://gteissier.wordpress.com/2010/03/02/tshark-the-swiss-army-knife-of-packet-analysis/" target="_blank">http://gteissier.wordpress.com/2010/03/02/tshark-the-swiss-army-knife-of-packet-analysis/</a><br><br>
-MC<div><div><br><br><div class="gmail_quote">
On Sun, Mar 3, 2013 at 4:40 PM, shouldbe q931 <span dir="ltr"><<a href="mailto:shouldbeq931@gmail.com" target="_blank">shouldbeq931@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div>On Sun, Mar 3, 2013 at 11:40 PM, Avi Marcus <<a href="mailto:avi@avimarcus.net" target="_blank">avi@avimarcus.net</a>> wrote:<br>
> I've have some really large PCAPs sometimes and wireshark just dies trying<br>
> to decode the audio in them.<br>
><br>
> All the links for audio extraction on voipinfo seem really old.<br>
><br>
> Is there something else to extract the audio from pcaps? Or some command to<br>
> to pass tshark to just save all audio as a .wav file?<br>
><br>
> What does voipmonitor use?<br>
> I think I asked this before...<br>
><br>
> Thanks,<br>
> -Avi Marcus<br>
<br>
</div></div>How big are the pcap files ?<br>
<br>
you could use editcap to split them up into more manageable chunks,<br>
and then use wireshark...<br>
<a href="http://www.wireshark.org/docs/man-pages/editcap.html" target="_blank">http://www.wireshark.org/docs/man-pages/editcap.html</a><br>
<br>
I've not either but, youmight look at<br>
<br>
<a href="http://frox25.no-ip.org/~mtve/wiki/RtpExtract.html" target="_blank">http://frox25.no-ip.org/~mtve/wiki/RtpExtract.html</a><br>
<br>
and<br>
<br>
<a href="http://www.netresec.com/?page=NetworkMiner" target="_blank">http://www.netresec.com/?page=NetworkMiner</a><br>
<br>
Cheers<br>
<br>
Arne<br>
<br>
_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
</blockquote></div><br><br clear="all"><br></div></div><span><font color="#888888">-- <br>Michael S Collins<br>Twitter: @mercutioviz<br><a href="http://www.FreeSWITCH.org" target="_blank">http://www.FreeSWITCH.org</a><br>
<a href="http://www.ClueCon.com" target="_blank">http://www.ClueCon.com</a><br>
<a href="http://www.OSTAG.org" target="_blank">http://www.OSTAG.org</a><br><br>
</font></span><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div></div>
<br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div></div></div><div class="HOEnZb"><div class="h5"><br><br clear="all"><br>-- <br>Michael S Collins<br>Twitter: @mercutioviz<br><a href="http://www.FreeSWITCH.org" target="_blank">http://www.FreeSWITCH.org</a><br>
<a href="http://www.ClueCon.com" target="_blank">http://www.ClueCon.com</a><br>
<a href="http://www.OSTAG.org" target="_blank">http://www.OSTAG.org</a><br><br>
</div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
FreeSWITCH-powered IP PBX: The CudaTel Communication Server<br>
<a href="http://www.cudatel.com" target="_blank">http://www.cudatel.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://wiki.freeswitch.org" target="_blank">http://wiki.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<br></blockquote></div><br></div>