20 Feb
2009
20 Feb
'09
3:27 p.m.
Shelby Ramsey napsal(a):
Why not just use NGREP and then dump the packets at a more reasonable pace?
Thank you very much, Shelby, for your interest! I can't use ngrep because the dump is not searchable IMO :-) See below, please. You aren't going to be able to analysis in real time anyway.
Some basic diagnosis should by doable realtime. For example: 1. find whole SIP trace for selected call (both a-leg, b-leg) 2. find all succeful user REGISTERs for given period ... And I have no idea how to do it on 50-100 GiB plain text file. Best regards, kokoska.rokoska