[asterisk-users] how to sniff RTP and SIP traffic only

[Duncan Turnbull]

For Linux use tcpdump on the host you are after

tcpdump udp and port 5060 or portrange 10000-16000 -s0 -i eth0

where 5060 is your SIP port and 10000-16000 are your rtp ranges
-s0 means snap length of 0 so capture all the packet rather than cutting 
off at a point

And refine it by adding the host you are targetting and -w to write to a 
file.

Then you can import the file in wireshark and use the voip utlities to 
listen to it fairly easily or use tcpdump -r to read it back and clean 
it out a bit more

Cheers Duncan

Xavier Cardil wrote:
> Hi, do somebody knows how to sniff RTP and SIP traffic only for a 
> faster debugging ?
>
> Thanks.
> ------------------------------------------------------------------------
>
> _______________________________________________
> -- Bandwidth and Colocation Provided by http://www.api-digital.com --
>
> asterisk-users mailing list
> To UNSUBSCRIBE or update options visit:
>    http://lists.digium.com/mailman/listinfo/asterisk-users