<div dir="ltr"><div>Lots of good stuff in this thread. I was able to overcome the limitations in pcapsipdump with a couple well placed hash tables and an improved file naming convention so that calls can be located if data center + call UUID is known. Combined with graylog/elasticsearch, we can search for calls and programmatically generate the URL link to the capture.<br><br></div>voipmonitor looks very interesting.<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 16, 2015 at 9:58 AM, Martin Tomczyk <span dir="ltr"><<a href="mailto:martin.tomczyk@legion.de" target="_blank">martin.tomczyk@legion.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div link="blue" vlink="purple" lang="DE"><div><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">As alternative: <u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US">We are using homer sipcapture. Works great for us.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><a href="http://sipcapture.org/" target="_blank">http://sipcapture.org/</a><u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Calibri","sans-serif";color:#1f497d" lang="EN-US"><u></u> <u></u></span></p><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">Gesendet:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Donnerstag, 16. April 2015 15:21<br><br><u></u><u></u></span></p><div><div class="h5"><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal"><span lang="EN-US">Thanks, I'll try that out.<u></u><u></u></span></p></div><div><p class="MsoNormal"><span lang="EN-US"><u></u> <u></u></span></p><div><p class="MsoNormal">On Thu, Apr 16, 2015 at 7:42 AM, <<a href="mailto:royj@yandex.ru" target="_blank">royj@yandex.ru</a>> wrote:<u></u><u></u></p><div><p class="MsoNormal">+1 besides separated pcaps there is a lot statistics in a database like duration, progress_time, whohanged, lastSIPresponseNum, mos and other<u></u><u></u></p></div><div><p class="MsoNormal"> <u></u><u></u></p></div><div><p class="MsoNormal">16.04.2015, 14:09, "Regis M" <<a href="mailto:regis.freeswitch.org@tornad.net" target="_blank">regis.freeswitch.org@tornad.net</a>>:<u></u><u></u></p></div><div><div><blockquote style="margin-top:5.0pt;margin-bottom:5.0pt"><div><p class="MsoNormal">+1 best tool i've found for the moment... using only the capture side from years ago.<u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p><div><p class="MsoNormal">2015-04-16 1:10 GMT+02:00 Nathan Neulinger <<a href="mailto:nneul@mst.edu" target="_blank">nneul@mst.edu</a>>:<u></u><u></u></p><p class="MsoNormal">Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without<br>the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.<br><span style="color:#888888"><br>-- Nathan</span><u></u><u></u></p><div><div><p class="MsoNormal"><br>On 04/15/2015 06:02 PM, Alex Balashov wrote:<br>> They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.<br>><br>> One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.<br>><br>> It's a great product, but not for everyone.<br>><br>> --<br>> Alex Balashov | Principal | Evariste Systems LLC<br>> 303 Perimeter Center North, Suite 300<br>> Atlanta, GA 30346<br>> United States<br>><br>> Tel: <a href="tel:%2B1-800-250-5920" target="_blank">+1-800-250-5920</a> (toll-free) / <a href="tel:%2B1-678-954-0671" target="_blank">+1-678-954-0671</a> (direct)<br>> Web: <a href="http://www.evaristesys.com/" target="_blank">http://www.evaristesys.com/</a>, <a href="http://www.csrpswitch.com/" target="_blank">http://www.csrpswitch.com/</a><br>><br>> Sent from my BlackBerry.<br>> Original Message<br>> From: Nathan Neulinger<br>> Sent: Wednesday, April 15, 2015 18:50<br>> To: FreeSWITCH Users Help<br>> Reply To: FreeSWITCH Users Help<br>> Subject: Re: [Freeswitch-users] pcapsipdump<br>><br>> Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures.<br>> The pretty UI is non-free, but the capture engine is useful by itself.<br>><br>> <a href="http://sourceforge.net/projects/voipmonitor/" target="_blank">http://sourceforge.net/projects/voipmonitor/</a><br>><br>> -- Nathan<br>><br>> On 04/15/2015 05:39 PM, Brian West wrote:<br>>> Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.<br>>><br>>> On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <<a href="mailto:abalashov@evaristesys.com" target="_blank">abalashov@evaristesys.com</a> <mailto:<a href="mailto:abalashov@evaristesys.com" target="_blank">abalashov@evaristesys.com</a>>> wrote:<br>>><br>>> In my experience, the major problem with this is dealing with calls that span capture chunks.<br>>><br>>> --<br>>> Alex Balashov | Principal | Evariste Systems LLC<br>>> 303 Perimeter Center North, Suite 300<br>>> Atlanta, GA 30346<br>>> United States<br>>><br>>> Tel: <a href="tel:%2B1-800-250-5920" target="_blank">+1-800-250-5920</a> <tel:%2B<a href="tel:1-800-250-5920" target="_blank">1-800-250-5920</a>> (toll-free) / <a href="tel:%2B1-678-954-0671" target="_blank">+1-678-954-0671</a> <tel:%2B<a href="tel:1-678-954-0671" target="_blank">1-678-954-0671</a>> (direct)<br>>> Web: <a href="http://www.evaristesys.com/" target="_blank">http://www.evaristesys.com/</a>, <a href="http://www.csrpswitch.com/" target="_blank">http://www.csrpswitch.com/</a><br>>><br>>> Sent from my BlackBerry.<br>>> *From: *Brian West<br>>> *Sent: *Wednesday, April 15, 2015 18:29<br>>> *To: *FreeSWITCH Users Help<br>>> *Reply To: *FreeSWITCH Users Help<br>>> *Subject: *Re: [Freeswitch-users] pcapsipdump<br>>><br>>><br>>> Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end<br>>> of the call, there by saving yourself a little bit of time while extracting the data.<br>>><br>>> On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <<a href="mailto:abalashov@evaristesys.com" target="_blank">abalashov@evaristesys.com</a> <mailto:<a href="mailto:abalashov@evaristesys.com" target="_blank">abalashov@evaristesys.com</a>>> wrote:<br>>><br>>><br>>> On 04/15/2015 06:13 PM, Brian West wrote:<br>>><br>>>> To solve this, you could run a big ring buffer, load mod_xml_cdr, then<br>>>> build a wireshark filter out of that data and process the ring buffer,<br>>>> i've done this before and it works quite well.<br>>><br>>> By ring buffer, do you mean a large amount of tcpdump capture rotations,<br>>> including options like -C and -W?<br>>><br>>> --<br>>> Alex Balashov | Principal | Evariste Systems LLC<br>>> 303 Perimeter Center North, Suite 300<br>>> Atlanta, GA 30346<br>>> United States<br>>><br>>> Tel: <a href="tel:%2B1-800-250-5920" target="_blank">+1-800-250-5920</a> <tel:%2B<a href="tel:1-800-250-5920" target="_blank">1-800-250-5920</a>> (toll-free) / <a href="tel:%2B1-678-954-0671" target="_blank">+1-678-954-0671</a> <tel:%2B<a href="tel:1-678-954-0671" target="_blank">1-678-954-0671</a>> (direct)<br>>> Web: <a href="http://www.evaristesys.com/" target="_blank">http://www.evaristesys.com/</a>, <a href="http://www.csrpswitch.com/" target="_blank">http://www.csrpswitch.com/</a><br>>><br>>> _________________________________________________________________________<br>>> Professional FreeSWITCH Consulting Services:<br>>> <a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a> <mailto:<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>><br>>> <a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>>><br>>> Official FreeSWITCH Sites<br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>> <a href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.org</a><br>>> <a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br>>><br>>> FreeSWITCH-users mailing list<br>>> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a> <mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a>><br>>> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>>> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>><br>>><br>>><br>>><br>>> --<br>>><br>>> */Brian West/*<br>>> <a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a> <mailto:<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>><br>>><br>>><br>>> */Twitter: @FreeSWITCH , @briankwest/*<br>>> <a href="http://www.freeswitchbook.com/" target="_blank">http://www.freeswitchbook.com</a><br>>> <a href="http://www.freeswitchcookbook.com/" target="_blank">http://www.freeswitchcookbook.com</a><br>>><br>>> ClueCon 2015 Call for Speakers <<a href="https://www.cluecon.com/call-for-speakers/" target="_blank">https://www.cluecon.com/call-for-speakers/</a>> | Register<br>>> <<a href="https://freeswitch.com/cart.php?gid=1" target="_blank">https://freeswitch.com/cart.php?gid=1</a>> TODAY! | Reddit: /r/freeswitch <<a href="https://www.reddit.com/r/freeswitch" target="_blank">https://www.reddit.com/r/freeswitch</a>><br>>><br>>> *T:*<a href="tel:%2B19184209001" target="_blank">+19184209001</a> <tel:%2B<a href="tel:19184209001" target="_blank">19184209001</a>> | *F:*<a href="tel:%2B19184209002" target="_blank">+19184209002</a> <tel:%2B<a href="tel:19184209002" target="_blank">19184209002</a>> | *M:*+1918424WEST (9378)<br>>> *iNUM:*<a href="tel:%2B883%205100%201420%209001" target="_blank">+883 5100 1420 9001</a> | *ISN:*410*543 | *Skype:*briankwest<br>>><br>>><br>>><br>>> _________________________________________________________________________<br>>> Professional FreeSWITCH Consulting Services:<br>>> <a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a> <mailto:<a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a>><br>>> <a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>>><br>>> Official FreeSWITCH Sites<br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>> <a href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.org</a><br>>> <a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br>>><br>>> FreeSWITCH-users mailing list<br>>> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a> <mailto:<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a>><br>>> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>>> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>><br>>><br>>><br>>><br>>> --<br>>><br>>> */Brian West/*<br>>> <a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a> <mailto:<a href="mailto:brian@freeswitch.org" target="_blank">brian@freeswitch.org</a>><br>>><br>>><br>>> */Twitter: @FreeSWITCH , @briankwest/*<br>>> <a href="http://www.freeswitchbook.com/" target="_blank">http://www.freeswitchbook.com</a><br>>> <a href="http://www.freeswitchcookbook.com/" target="_blank">http://www.freeswitchcookbook.com</a><br>>><br>>> ClueCon 2015 Call for Speakers <<a href="https://www.cluecon.com/call-for-speakers/" target="_blank">https://www.cluecon.com/call-for-speakers/</a>> | Register<br>>> <<a href="https://freeswitch.com/cart.php?gid=1" target="_blank">https://freeswitch.com/cart.php?gid=1</a>> TODAY! | Reddit: /r/freeswitch <<a href="https://www.reddit.com/r/freeswitch" target="_blank">https://www.reddit.com/r/freeswitch</a>><br>>><br>>> *T:*<a href="tel:%2B19184209001" target="_blank">+19184209001</a> | *F:*<a href="tel:%2B19184209002" target="_blank">+19184209002</a> | *M:*+1918424WEST (9378)<br>>> *iNUM:*<a href="tel:%2B883%205100%201420%209001" target="_blank">+883 5100 1420 9001</a> | *ISN:*410*543 | *Skype:*briankwest<br>>><br>>><br>>><br>>> _________________________________________________________________________<br>>> Professional FreeSWITCH Consulting Services:<br>>> <a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br>>> <a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br>>><br>>> Official FreeSWITCH Sites<br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>> <a href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.org</a><br>>> <a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br>>><br>>> FreeSWITCH-users mailing list<br>>> <a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br>>> <a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>>> UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>>> <a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br>>><br>><br><br>--<br>------------------------------------------------------------<br>Nathan Neulinger <a href="mailto:nneul@mst.edu" target="_blank">nneul@mst.edu</a><br>Missouri S&T Information Technology <a href="tel:%28573%29%20612-1412" target="_blank">(573) 612-1412</a><br>System Administrator - Architect<br><br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><u></u><u></u></p></div></div></div></div></div><p class="MsoNormal">,<u></u><u></u></p><p>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services: <br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com/" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org/" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com/" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org/" target="_blank">http://www.freeswitch.org</a><u></u><u></u></p></blockquote></div></div><p class="MsoNormal"><br>_________________________________________________________________________<br>Professional FreeSWITCH Consulting Services:<br><a href="mailto:consulting@freeswitch.org" target="_blank">consulting@freeswitch.org</a><br><a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br><br>Official FreeSWITCH Sites<br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br><a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br><a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br><br>FreeSWITCH-users mailing list<br><a href="mailto:FreeSWITCH-users@lists.freeswitch.org" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br><a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br><a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><u></u><u></u></p></div><p class="MsoNormal"><br><br clear="all"><u></u><u></u></p><div><p class="MsoNormal"><u></u> <u></u></p></div><p class="MsoNormal">-- <u></u><u></u></p><div><div><p class="MsoNormal">Aron Podrigal<u></u><u></u></p><div><p class="MsoNormal">-<u></u><u></u></p></div><div><p class="MsoNormal">//Be happy :-)<u></u><u></u></p></div></div></div></div></div></div></div></div><br>_________________________________________________________________________<br>
Professional FreeSWITCH Consulting Services:<br>
<a href="mailto:consulting@freeswitch.org">consulting@freeswitch.org</a><br>
<a href="http://www.freeswitchsolutions.com" target="_blank">http://www.freeswitchsolutions.com</a><br>
<br>
Official FreeSWITCH Sites<br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br>
<a href="http://confluence.freeswitch.org" target="_blank">http://confluence.freeswitch.org</a><br>
<a href="http://www.cluecon.com" target="_blank">http://www.cluecon.com</a><br>
<br>
FreeSWITCH-users mailing list<br>
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org">FreeSWITCH-users@lists.freeswitch.org</a><br>
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br>
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br>
<a href="http://www.freeswitch.org" target="_blank">http://www.freeswitch.org</a><br></blockquote></div><br></div>