On Fri, Feb 20, 2009 at 9:27 AM, kokoska rokoska
<kokoska.rokoska@post.cz> wrote:
Shelby Ramsey napsal(a):
> Why not just use NGREP and then dump the packets at a more reasonable
> pace?
Thank you very much, Shelby, for your interest!
I can't use ngrep because the dump is not searchable IMO :-)
See below, please.
You aren't going to be able to analysis in real time anyway.
>
Some basic diagnosis should by doable realtime. For example:
1. find whole SIP trace for selected call (both a-leg, b-leg)
2. find all succeful user REGISTERs for given period
...
And I have no idea how to do it on 50-100 GiB plain text file.