[asterisk-users] OT: Capture Asterisk traffic

[Stephen Bosch]

CSB wrote:
> I want to capture all my Asterisk traffic (including RTP) and then
> analyse it.
> 
> My plan was to use tcpdump and then analyse with Wireshark. The
> following works:
> tcpdump -i eth0 -s 0 -w /tmp/tcpdump.1
> 
> But I want to be a bit more selective:
> tcpdump -C 100 -W 10 -w /tmp/tcpdump -i eth1 -s 0 udp and dst port >= 5060
> 
> This doesn't capture the RTP traffic. Could anyone advise what I'm doing
> wrong or suggest a better way?

Well, the first thing I notice is that your first tcpdump example is
listening on eth0, and the second is listening on eth1.

What happens when you do

tcpdump -i eth1 -s 0 -w /tmp/tcpdump.1

Do you see the RTP traffic then?

-Stephen-