<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <p>I usually use tcpdump (can be also sipgrep, ngrep or tshark) to
      save sip traffic in pcap files on local hdd. If you search on the
      web, you should find some wrapper scripts that you can run in
      background for such purpose. These tools (or the wrapper scripts)
      have the option to split the pcaps per size (say new pcap every
      50MB or traffic) or per time interval (one pcap file for each 2
      hours), making it convenient to delete old files and avoid filling
      the hdd.<br>
    </p>
    <p>Then later I can investigate pcaps as I need with sngrep or
      wireshark.</p>
    <p>Homer sipcapture is a nice tool, too, but sometimes is a bit too
      much to install it for a small deployment or in the
      development/deployment/testing phase of a new system.</p>
    <p>Cheers,<br>
      Daniel<br>
    </p>
    <br>
    <div class="moz-cite-prefix">On 12.10.17 01:50, Matt Schwinn wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAMi8z0i-LzZA7sA346uqp2Nsvo2p0vf339HQTCsyWMx_+vaHjg@mail.gmail.com">
      <div dir="ltr">Is there any way to view sngrep for times that it
        is not running?  I think this is an awesome tool, but I have to
        keep it running if I want to be able to see a log.  Thank you!<br
          clear="all">
        <div><br>
          -- <br>
          <div class="gmail_signature" data-smartmail="gmail_signature">
            <div dir="ltr">
              <div>
                <div dir="ltr">
                  <div>
                    <div dir="ltr">
                      <div>
                        <div dir="ltr">
                          <div>
                            <div dir="ltr">
                              <div>Enjoy the day!<br>
                                Matt Schwinn<br>
                                TCG Technologies LLC <br>
                              </div>
                              <div>      and<br>
                              </div>
                              <div>Company B<br>
                              </div>
                              <div>209-202-3329<br>
                              </div>
                              <div><a href="http://www.TCGTechLLC.com"
                                  target="_blank" moz-do-not-send="true">www.TCGTechLLC.com</a><br>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Spce-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Spce-user@lists.sipwise.com">Spce-user@lists.sipwise.com</a>
<a class="moz-txt-link-freetext" href="https://lists.sipwise.com/listinfo/spce-user">https://lists.sipwise.com/listinfo/spce-user</a>
</pre>
    </blockquote>
    <br>
    <pre class="moz-signature" cols="72">-- 
Daniel-Constantin Mierla
<a class="moz-txt-link-abbreviated" href="http://www.twitter.com/miconda">www.twitter.com/miconda</a> -- <a class="moz-txt-link-abbreviated" href="http://www.linkedin.com/in/miconda">www.linkedin.com/in/miconda</a>
Kamailio Advanced Training, in Berlin, Nov 13-15, 2017 - <a class="moz-txt-link-abbreviated" href="http://www.asipto.com">www.asipto.com</a>
Kamailio World Conference - <a class="moz-txt-link-abbreviated" href="http://www.kamailioworld.com">www.kamailioworld.com</a></pre>
  </body>
</html>