[VoiceOps] Splitting SIP+RTP PCAP files

[Darren Schreiber]

What's wrong with pcapsipdump? You can pipe input into that I believe... its an old tool but it still works. :-)

Nicholas Sten <nicksten at gmail.com> wrote:



Kristian,

Alex has an elegant and inexpensive (read: basically free!) solution that you might want to check out.  Here's a brief description (I've culled from a personal email, so I hope I don't misrepresent it)

So I wrote a highly parallelised, multithreaded tool that runs on such a "capture box" and listens to SIP traffic intelligently.  It automatically identifies the media ports involved in a call and records both SIP and RTP to distinct capture files in a dated directory hierarchy separated by day and hour.  The capture file contains the date, time, ANI, DNIS and Call-ID.

You should give him a shout: Alex Balashov <abalashov at evaristesys.com<mailto:abalashov at evaristesys.com>>

I can vouch for the quality and effectiveness of his solutions.

-N


On Wed, Jun 23, 2010 at 9:02 AM, Kristian Kielhofner <kristian.kielhofner at gmail.com<mailto:kristian.kielhofner at gmail.com>> wrote:
Hello everyone,

 Does anyone know of a tool to split PCAP files that is SIP+RTP
aware?  Ideally I'd be able to record a PCAP file with any number of
calls and then have a utility split that file into each separate call?
 I'm pretty sure I've seen a utility to do this, I just can't remember
the name...

Thanks!

--
Kristian Kielhofner
http://www.astlinux.org
http://blog.krisk.org
http://www.star2star.com
http://www.submityoursip.com
http://www.voalte.com
_______________________________________________
VoiceOps mailing list
VoiceOps at voiceops.org<mailto:VoiceOps at voiceops.org>
https://puck.nether.net/mailman/listinfo/voiceops

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100623/27d7bc4a/attachment.html>