Hi, I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel processes the packets on another interface that I'm capturing on (weak_host_model). any other thoughts? Aron
nope, it can't catch everything, especially when transfers are involved. On Wed, Apr 15, 2015 at 11:41 AM, Podrigal, Aron <aronp@guaranteedplus.com> wrote:
Hi,
I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel processes the packets on another interface that I'm capturing on (weak_host_model). any other thoughts?
Aron
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
pcapsipdump is single-threaded (which is not necessarily bad), and has inefficient algorithms for mapping calls to files and for recycling elements in its call table. On Wed, Apr 15, 2015 at 12:41 PM, Podrigal, Aron <aronp@guaranteedplus.com> wrote:
Hi,
I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel processes the packets on another interface that I'm capturing on (weak_host_model). any other thoughts?
Aron
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
try sngrep, it's available at github. Also it makes sense to capture the packets with tcpdump, and analyze afterwards in low priority. On Wed, Apr 15, 2015 at 7:13 PM, Christopher Rienzo <cmrienzo@gmail.com> wrote:
pcapsipdump is single-threaded (which is not necessarily bad), and has inefficient algorithms for mapping calls to files and for recycling elements in its call table.
On Wed, Apr 15, 2015 at 12:41 PM, Podrigal, Aron <aronp@guaranteedplus.com> wrote:
Hi,
I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel processes the packets on another interface that I'm capturing on (weak_host_model). any other thoughts?
Aron
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks On Wed, Apr 15, 2015 at 2:27 PM, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
try sngrep, it's available at github. Also it makes sense to capture the packets with tcpdump, and analyze afterwards in low priority.
On Wed, Apr 15, 2015 at 7:13 PM, Christopher Rienzo <cmrienzo@gmail.com> wrote:
pcapsipdump is single-threaded (which is not necessarily bad), and has inefficient algorithms for mapping calls to files and for recycling elements in its call table.
On Wed, Apr 15, 2015 at 12:41 PM, Podrigal, Aron < aronp@guaranteedplus.com> wrote:
Hi,
I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel
processes
the packets on another interface that I'm capturing on (weak_host_model). any other thoughts?
Aron
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Aron Podrigal - //Be happy :-)
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well. On Wed, Apr 15, 2015 at 1:32 PM, Podrigal, Aron <aronp@guaranteedplus.com> wrote:
Thanks
On Wed, Apr 15, 2015 at 2:27 PM, Stanislav Sinyagin <ssinyagin@gmail.com> wrote:
try sngrep, it's available at github. Also it makes sense to capture the packets with tcpdump, and analyze afterwards in low priority.
On Wed, Apr 15, 2015 at 7:13 PM, Christopher Rienzo <cmrienzo@gmail.com> wrote:
pcapsipdump is single-threaded (which is not necessarily bad), and has inefficient algorithms for mapping calls to files and for recycling elements in its call table.
On Wed, Apr 15, 2015 at 12:41 PM, Podrigal, Aron < aronp@guaranteedplus.com> wrote:
Hi,
I'm running pcapsipdump on fs server and I notice that I'm missing captures for lots of calls. I suspect it might be that the kernel
processes
the packets on another interface that I'm capturing on (weak_host_model). any other thoughts?
Aron
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Aron Podrigal - //Be happy :-)
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W? -- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data. On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result. On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*Brian West* brian@freeswitch.org
*Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- *Brian West* brian@freeswitch.org *Twitter: @FreeSWITCH , @briankwest* http://www.freeswitchbook.com http://www.freeswitchcookbook.com ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> *T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself. http://sourceforge.net/projects/voipmonitor/ -- Nathan On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
> To solve this, you could run a big ring buffer, load mod_xml_cdr, then > build a wireshark filter out of that data and process the ring buffer, > i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users. One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs. It's a great product, but not for everyone. -- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself. http://sourceforge.net/projects/voipmonitor/ -- Nathan On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc. -- Nathan On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
+1 best tool i've found for the moment... using only the capture side from years ago. 2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>:
Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.
-- Nathan
On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
Thanks, I'll try that out. On Thu, Apr 16, 2015 at 7:42 AM, <royj@yandex.ru> wrote:
+1 besides separated pcaps there is a lot statistics in a database like duration, progress_time, whohanged, lastSIPresponseNum, mos and other
16.04.2015, 14:09, "Regis M" <regis.freeswitch.org@tornad.net>:
+1 best tool i've found for the moment... using only the capture side from years ago.
2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>:
Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.
-- Nathan
On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B 19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
,
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Aron Podrigal - //Be happy :-)
As alternative: We are using homer sipcapture. Works great for us. http://sipcapture.org/ Gesendet: Donnerstag, 16. April 2015 15:21 Thanks, I'll try that out. On Thu, Apr 16, 2015 at 7:42 AM, <royj@yandex.ru> wrote: +1 besides separated pcaps there is a lot statistics in a database like duration, progress_time, whohanged, lastSIPresponseNum, mos and other 16.04.2015, 14:09, "Regis M" <regis.freeswitch.org@tornad.net>: +1 best tool i've found for the moment... using only the capture side from years ago. 2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>: Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc. -- Nathan On 04/15/2015 06:02 PM, Alex Balashov wrote: > They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users. > > One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs. > > It's a great product, but not for everyone. > > -- > Alex Balashov | Principal | Evariste Systems LLC > 303 Perimeter Center North, Suite 300 > Atlanta, GA 30346 > United States > > Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) > Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ > > Sent from my BlackBerry. > Original Message > From: Nathan Neulinger > Sent: Wednesday, April 15, 2015 18:50 > To: FreeSWITCH Users Help > Reply To: FreeSWITCH Users Help > Subject: Re: [Freeswitch-users] pcapsipdump > > Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. > The pretty UI is non-free, but the capture engine is useful by itself. > > http://sourceforge.net/projects/voipmonitor/ > > -- Nathan > > On 04/15/2015 05:39 PM, Brian West wrote: >> Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result. >> >> On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote: >> >> In my experience, the major problem with this is dealing with calls that span capture chunks. >> >> -- >> Alex Balashov | Principal | Evariste Systems LLC >> 303 Perimeter Center North, Suite 300 >> Atlanta, GA 30346 >> United States >> >> Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> <tel:%2B1-678-954-0671> (direct) >> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ >> >> Sent from my BlackBerry. >> *From: *Brian West >> *Sent: *Wednesday, April 15, 2015 18:29 >> *To: *FreeSWITCH Users Help >> *Reply To: *FreeSWITCH Users Help >> *Subject: *Re: [Freeswitch-users] pcapsipdump >> >> >> Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end >> of the call, there by saving yourself a little bit of time while extracting the data. >> >> On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote: >> >> >> On 04/15/2015 06:13 PM, Brian West wrote: >> >>> To solve this, you could run a big ring buffer, load mod_xml_cdr, then >>> build a wireshark filter out of that data and process the ring buffer, >>> i've done this before and it works quite well. >> >> By ring buffer, do you mean a large amount of tcpdump capture rotations, >> including options like -C and -W? >> >> -- >> Alex Balashov | Principal | Evariste Systems LLC >> 303 Perimeter Center North, Suite 300 >> Atlanta, GA 30346 >> United States >> >> Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> <tel:%2B1-678-954-0671> (direct) >> Web: http://www.evaristesys.com/, http://www.csrpswitch.com/ >> >> _________________________________________________________________________ >> Professional FreeSWITCH Consulting Services: >> consulting@freeswitch.org <mailto:consulting@freeswitch.org> >> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> >> >> Official FreeSWITCH Sites >> http://www.freeswitch.org <http://www.freeswitch.org/> >> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> >> http://www.cluecon.com <http://www.cluecon.com/> >> >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org <http://www.freeswitch.org/> >> >> >> >> >> -- >> >> */Brian West/* >> brian@freeswitch.org <mailto:brian@freeswitch.org> >> >> >> */Twitter: @FreeSWITCH , @briankwest/* >> http://www.freeswitchbook.com <http://www.freeswitchbook.com/> >> http://www.freeswitchcookbook.com <http://www.freeswitchcookbook.com/> >> >> ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register >> <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> >> >> *T:*+19184209001 <tel:%2B19184209001> <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> <tel:%2B19184209002> | *M:*+1918424WEST (9378) >> *iNUM:*+883 5100 1420 9001 <tel:%2B883%205100%201420%209001> | *ISN:*410*543 | *Skype:*briankwest >> >> >> >> _________________________________________________________________________ >> Professional FreeSWITCH Consulting Services: >> consulting@freeswitch.org <mailto:consulting@freeswitch.org> >> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> >> >> Official FreeSWITCH Sites >> http://www.freeswitch.org <http://www.freeswitch.org/> >> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> >> http://www.cluecon.com <http://www.cluecon.com/> >> >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org <http://www.freeswitch.org/> >> >> >> >> >> -- >> >> */Brian West/* >> brian@freeswitch.org <mailto:brian@freeswitch.org> >> >> >> */Twitter: @FreeSWITCH , @briankwest/* >> http://www.freeswitchbook.com <http://www.freeswitchbook.com/> >> http://www.freeswitchcookbook.com <http://www.freeswitchcookbook.com/> >> >> ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register >> <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch> >> >> *T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) >> *iNUM:*+883 5100 1420 9001 <tel:%2B883%205100%201420%209001> | *ISN:*410*543 | *Skype:*briankwest >> >> >> >> _________________________________________________________________________ >> Professional FreeSWITCH Consulting Services: >> consulting@freeswitch.org >> http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> >> >> Official FreeSWITCH Sites >> http://www.freeswitch.org <http://www.freeswitch.org/> >> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> >> http://www.cluecon.com <http://www.cluecon.com/> >> >> FreeSWITCH-users mailing list >> FreeSWITCH-users@lists.freeswitch.org >> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users >> UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users >> http://www.freeswitch.org <http://www.freeswitch.org/> >> > -- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 <tel:%28573%29%20612-1412> System Administrator - Architect _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/> FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org <http://www.freeswitch.org/> , _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com <http://www.freeswitchsolutions.com/> Official FreeSWITCH Sites http://www.freeswitch.org <http://www.freeswitch.org/> http://confluence.freeswitch.org <http://confluence.freeswitch.org/> http://www.cluecon.com <http://www.cluecon.com/> FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org <http://www.freeswitch.org/> _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org -- Aron Podrigal - //Be happy :-)
Lots of good stuff in this thread. I was able to overcome the limitations in pcapsipdump with a couple well placed hash tables and an improved file naming convention so that calls can be located if data center + call UUID is known. Combined with graylog/elasticsearch, we can search for calls and programmatically generate the URL link to the capture. voipmonitor looks very interesting. On Thu, Apr 16, 2015 at 9:58 AM, Martin Tomczyk <martin.tomczyk@legion.de> wrote:
As alternative:
We are using homer sipcapture. Works great for us.
*Gesendet:* Donnerstag, 16. April 2015 15:21
Thanks, I'll try that out.
On Thu, Apr 16, 2015 at 7:42 AM, <royj@yandex.ru> wrote:
+1 besides separated pcaps there is a lot statistics in a database like duration, progress_time, whohanged, lastSIPresponseNum, mos and other
16.04.2015, 14:09, "Regis M" <regis.freeswitch.org@tornad.net>:
+1 best tool i've found for the moment... using only the capture side from years ago.
2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>:
Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.
-- Nathan
On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B 19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
,
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Aron Podrigal
-
//Be happy :-)
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
On Thu, Apr 16, 2015 at 1:59 PM, Christopher Rienzo <cmrienzo@gmail.com> wrote:
Lots of good stuff in this thread. I was able to overcome the limitations in pcapsipdump with a couple well placed hash tables and an improved file naming convention so that calls can be located if data center + call UUID is known.
So you modified the pcapsipdump source?
Combined with graylog/elasticsearch, we can search for calls and programmatically generate the URL link to the capture.
voipmonitor looks very interesting.
On Thu, Apr 16, 2015 at 9:58 AM, Martin Tomczyk <martin.tomczyk@legion.de> wrote:
As alternative:
We are using homer sipcapture. Works great for us.
*Gesendet:* Donnerstag, 16. April 2015 15:21
Thanks, I'll try that out.
On Thu, Apr 16, 2015 at 7:42 AM, <royj@yandex.ru> wrote:
+1 besides separated pcaps there is a lot statistics in a database like duration, progress_time, whohanged, lastSIPresponseNum, mos and other
16.04.2015, 14:09, "Regis M" <regis.freeswitch.org@tornad.net>:
+1 best tool i've found for the moment... using only the capture side from years ago.
2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>:
Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc.
-- Nathan
On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov < abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B 19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto: FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers < https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE: http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
,
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
Aron Podrigal
-
//Be happy :-)
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- Aron Podrigal - //Be happy :-)
Hi There is also this tool called Gulp (it does high speed packet capture ):http://staff.washington.edu/corey/gulp/ There are some kernel parameters that help diminish the packet loss at high throughput with small UDP packets (with the cost of adding some delay ) net.core.wmem , net.core.rmem, net.core.optmem_max , net.core.netdev_max_backlog . Regards,Dragos From: Regis M <regis.freeswitch.org@tornad.net> To: FreeSWITCH Users Help <freeswitch-users@lists.freeswitch.org> Sent: Thursday, April 16, 2015 1:03 PM Subject: Re: [Freeswitch-users] pcapsipdump +1 best tool i've found for the moment... using only the capture side from years ago. 2015-04-16 1:10 GMT+02:00 Nathan Neulinger <nneul@mst.edu>: Right, that's why I mentioned just using the capture engine. Only the web UI has any license requirement. Even without the UI, you can do quite a bit with just the raw tables and the generated capture files that it separates by call/etc. -- Nathan On 04/15/2015 06:02 PM, Alex Balashov wrote:
They have a per-port licencing model, however, which is unduly restrictive for certain kinds of users.
One is users who need captures for purely diagnostic purposes and otherwise realise little bottom-line value from them. Another are short-duration traffic movers who realise little revenue relative to a high concurrent channel count, due to low ASRs.
It's a great product, but not for everyone.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 (toll-free) / +1-678-954-0671 (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. Original Message From: Nathan Neulinger Sent: Wednesday, April 15, 2015 18:50 To: FreeSWITCH Users Help Reply To: FreeSWITCH Users Help Subject: Re: [Freeswitch-users] pcapsipdump
Have you looked at using voipmonitor? The capture part is open source / GPL, and seems to do a nice job with captures. The pretty UI is non-free, but the capture engine is useful by itself.
http://sourceforge.net/projects/voipmonitor/
-- Nathan
On 04/15/2015 05:39 PM, Brian West wrote:
Thats easy to fix, you filter each part into its own file in order then pcapmerge the end result.
On Wed, Apr 15, 2015 at 5:31 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
In my experience, the major problem with this is dealing with calls that span capture chunks.
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
Sent from my BlackBerry. *From: *Brian West *Sent: *Wednesday, April 15, 2015 18:29 *To: *FreeSWITCH Users Help *Reply To: *FreeSWITCH Users Help *Subject: *Re: [Freeswitch-users] pcapsipdump
Yep, That with XML CDR, you can build a time frame and only look in files that were created within the start / end of the call, there by saving yourself a little bit of time while extracting the data.
On Wed, Apr 15, 2015 at 5:25 PM, Alex Balashov <abalashov@evaristesys.com <mailto:abalashov@evaristesys.com>> wrote:
On 04/15/2015 06:13 PM, Brian West wrote:
To solve this, you could run a big ring buffer, load mod_xml_cdr, then build a wireshark filter out of that data and process the ring buffer, i've done this before and it works quite well.
By ring buffer, do you mean a large amount of tcpdump capture rotations, including options like -C and -W?
-- Alex Balashov | Principal | Evariste Systems LLC 303 Perimeter Center North, Suite 300 Atlanta, GA 30346 United States
Tel: +1-800-250-5920 <tel:%2B1-800-250-5920> (toll-free) / +1-678-954-0671 <tel:%2B1-678-954-0671> (direct) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 <tel:%2B19184209001> | *F:*+19184209002 <tel:%2B19184209002> | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org <mailto:consulting@freeswitch.org> http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org <mailto:FreeSWITCH-users@lists.freeswitch.org> http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
--
*/Brian West/* brian@freeswitch.org <mailto:brian@freeswitch.org>
*/Twitter: @FreeSWITCH , @briankwest/* http://www.freeswitchbook.com http://www.freeswitchcookbook.com
ClueCon 2015 Call for Speakers <https://www.cluecon.com/call-for-speakers/> | Register <https://freeswitch.com/cart.php?gid=1> TODAY! | Reddit: /r/freeswitch <https://www.reddit.com/r/freeswitch>
*T:*+19184209001 | *F:*+19184209002 | *M:*+1918424WEST (9378) *iNUM:*+883 5100 1420 9001 | *ISN:*410*543 | *Skype:*briankwest
_________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com
Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com
FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
-- ------------------------------------------------------------ Nathan Neulinger nneul@mst.edu Missouri S&T Information Technology (573) 612-1412 System Administrator - Architect _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org _________________________________________________________________________ Professional FreeSWITCH Consulting Services: consulting@freeswitch.org http://www.freeswitchsolutions.com Official FreeSWITCH Sites http://www.freeswitch.org http://confluence.freeswitch.org http://www.cluecon.com FreeSWITCH-users mailing list FreeSWITCH-users@lists.freeswitch.org http://lists.freeswitch.org/mailman/listinfo/freeswitch-users UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users http://www.freeswitch.org
participants (10)
-
Alex Balashov
-
Brian West
-
Christopher Rienzo
-
Dragos Oancea
-
Martin Tomczyk
-
Nathan Neulinger
-
Podrigal, Aron
-
Regis M
-
royj＠yandex.ru
-
Stanislav Sinyagin