<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Very little as the amount of data being captured is quite small. We
    have it running on our production servers which routinely handle a
    couple of hundred concurrent calls.<br>
    <br>
    This is the script we use to start off the capture. It uses rolling
    capture files so we will always have the last X number of capture
    logs. It works very well and we have a custom system which enables
    us to search for calls and request traces for them for when we have
    to diagnose problems.<br>
    <br>
    #!/bin/bash<br>
    cd /var/lib/asterisk/siptraces<br>
    DATE=`date +%Y%m%d%H%M%S`<br>
    TRACEFILE=/var/lib/asterisk/siptraces/$DATE-siptrace.pcap<br>
    nohup /usr/sbin/tcpdump -p -i eth0 -s 0 port 5060 -w $TRACEFILE -C
    10 -W 500 &<br>
    <br>
    <br>
    On 16/01/14 14:27, Tiago Geada wrote:
    <blockquote
cite="mid:CAFmd8FiVokh3RLRz3XgogvLw6cd+_guV5bciKNVJsUhcSAbojA@mail.gmail.com"
      type="cite">
      <div dir="ltr">
        <div class="gmail_default"
          style="font-family:tahoma,sans-serif;font-size:small;color:#000066">You're
          right, seems like a nice way to debug. Regarding that, how
          would the impact be affected running it on asterisk box? I
          guess only port 5060 is not too bad</div>
      </div>
      <div class="gmail_extra"><br>
        <br>
        <div class="gmail_quote">On 16 January 2014 14:09, Gareth Blades
          <span dir="ltr"><<a moz-do-not-send="true"
              href="mailto:mailinglist+asterisk@dns99.co.uk"
              target="_blank">mailinglist+asterisk@dns99.co.uk</a>></span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
            <div text="#000000" bgcolor="#FFFFFF">
              <div>
                <div class="h5"> On 16/01/14 10:47, Tiago Geada wrote:
                  <blockquote type="cite">
                    <div dir="ltr">
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">Hi

                        folks,</div>
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">
                        <br>
                      </div>
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">We've

                        been having a weird issue... It is happening
                        more often in the last few months...</div>
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">
                        <br>
                      </div>
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">Most

                        inbound calls, we have in our dialplan before
                        Queue():</div>
                      <div class="gmail_default"
                        style="font-family:tahoma,sans-serif;font-size:small;color:rgb(0,0,102)">
                        <br>
                      </div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">Set(CALLERID(name)=${PARTNER}:0:${CALLERID(num)}:${UNIQUEID}:${CHANNEL})</font><span
style="color:rgb(0,0,102);font-family:tahoma,sans-serif">;</span></div>
                      <div class="gmail_default"><span
                          style="color:rgb(0,0,102);font-family:tahoma,sans-serif"><br>
                        </span></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">So when the call
                          rings a member, softphone will show this
                          string ....</font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">The issue is that
                          sometimes the string showing in the softphone
                          is not the same. Its a string from a past
                          call, in the latest case I've seen, from about
                          40 days ago!!</font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">User took a
                          screenshot, I've searched for that uniqueid
                          showing in softphone in cdr, and that string
                          was valid for a different call 40 days ago!!</font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">I searched full log,
                          and Set() sets the correct string... I can't
                          figure why softphone shows a string from a
                          past call !!</font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">:(</font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif"><br>
                        </font></div>
                      <div class="gmail_default"><font color="#000066"
                          face="tahoma, sans-serif">Any hints ?</font></div>
                    </div>
                    <br>
                    <fieldset></fieldset>
                    <br>
                  </blockquote>
                </div>
              </div>
              I would leave tcpdump running capturing port 5060 so you
              can load it onto wireshark and have a look at the sip
              headers. That will tell you if the SIP is incorrect or if
              its a problem with the client.<br>
            </div>
            <br>
            --<br>
_____________________________________________________________________<br>
            -- Bandwidth and Colocation Provided by <a
              moz-do-not-send="true" href="http://www.api-digital.com"
              target="_blank">http://www.api-digital.com</a> --<br>
            New to Asterisk? Join us for a live introductory webinar
            every Thurs:<br>
                           <a moz-do-not-send="true"
              href="http://www.asterisk.org/hello" target="_blank">http://www.asterisk.org/hello</a><br>
            <br>
            asterisk-users mailing list<br>
            To UNSUBSCRIBE or update options visit:<br>
               <a moz-do-not-send="true"
              href="http://lists.digium.com/mailman/listinfo/asterisk-users"
              target="_blank">http://lists.digium.com/mailman/listinfo/asterisk-users</a><br>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
    </blockquote>
  </body>
</html>