[VoiceOps] Utility for Splitting MGCP Calls from large packetcaptures?

[Justin Randall]

I know using Wireshark it seems to print a GUI latter for MGCP calls
however when trying to apply a filter for the packets based on the "VoIP
Calls" section for some reason my experience has been that it doesn't
work (haven't tried on any newer releases of Wireshark in a while).

 

You'll likely need to write your own using libpcap or BASH/Perl
scripting around tethereal.  The main challenge is that the endpoint IDs
in an MGCP messages are only sent in the MGCP requests but not on the
response which means you need to find all the TIDs/IPs/etc belonging to
the endpoint transactions you're interested in and then find all the
associated response packets based on TIDs and IPs.

 

Regards,

 

Justin Randall

 

  _____  

From: voiceops-bounces at voiceops.org
[mailto:voiceops-bounces at voiceops.org] On Behalf Of Christian Pena
Sent: Monday, February 22, 2010 11:38 AM
To: VoiceOps
Subject: [VoiceOps] Utility for Splitting MGCP Calls from large
packetcaptures?

 

I use pcapsipdump for splitting SIP calls from large packet capture
files. It nicely gives me one file per session/call

Anyone know of something that will do this for MGCP calls? 

-- 
Christian Pena
Network Engineer II
Direct: (786) 363-0460
Fax: (786) 363-0206

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100222/307b138c/attachment.html>