[Spce-user] sngrep

[Daniel-Constantin Mierla]

I usually use tcpdump (can be also sipgrep, ngrep or tshark) to save sip
traffic in pcap files on local hdd. If you search on the web, you should
find some wrapper scripts that you can run in background for such
purpose. These tools (or the wrapper scripts) have the option to split
the pcaps per size (say new pcap every 50MB or traffic) or per time
interval (one pcap file for each 2 hours), making it convenient to
delete old files and avoid filling the hdd.

Then later I can investigate pcaps as I need with sngrep or wireshark.

Homer sipcapture is a nice tool, too, but sometimes is a bit too much to
install it for a small deployment or in the
development/deployment/testing phase of a new system.

Cheers,
Daniel


On 12.10.17 01:50, Matt Schwinn wrote:
> Is there any way to view sngrep for times that it is not running?  I
> think this is an awesome tool, but I have to keep it running if I want
> to be able to see a log.  Thank you!
>
> -- 
> Enjoy the day!
> Matt Schwinn
> TCG Technologies LLC
>       and
> Company B
> 209-202-3329
> www.TCGTechLLC.com <http://www.TCGTechLLC.com>
>
>
> _______________________________________________
> Spce-user mailing list
> Spce-user at lists.sipwise.com
> https://lists.sipwise.com/listinfo/spce-user

-- 
Daniel-Constantin Mierla
www.twitter.com/miconda -- www.linkedin.com/in/miconda
Kamailio Advanced Training, in Berlin, Nov 13-15, 2017 - www.asipto.com
Kamailio World Conference - www.kamailioworld.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20171012/586e0483/attachment-0001.html>