[VoiceOps] Splitting SIP+RTP PCAP files

[Lee Riemer]

Will it work on data already captured in .pcap files?

On 6/23/2010 12:07 PM, Brooks Bridges wrote:
>
> The utility was written by Alex as a replacement for pcapsipdump.  
> pcapsipdump suffers from severe performance and stability problems 
> with any appreciable traffic.
>
> I can vouch that Alex's utility is very stable and efficient, but I do 
> have to take exception to the "inexpensive (read: basically free!)" 
> statement, as the utility is wholly owned (as per work-for-hire 
> agreement) by Ifbyphone, Inc.
>
> Please contact me off-list if you would like to discuss using the 
> utility.  I do not believe there is an issue with us releasing the 
> utility "free as in beer", however I am not the one that can authorize 
> such a release.  I will have to confirm this with our upper management.
>
> Thanks
>
> /Brooks R. Bridges/
>
> /Telecommunications Manager/
>
> /Ifbyphone, Inc./
>
> /Phone: (847) 983-3000/
>
> /Fax: (847) 676-6553/
>
> /bbridges at ifbyphone.com/
>
> /http://www.ifbyphone.com/
>
> *From:* voiceops-bounces at voiceops.org 
> [mailto:voiceops-bounces at voiceops.org] *On Behalf Of *Darren Schreiber
> *Sent:* Wednesday, June 23, 2010 11:58 AM
> *To:* Nicholas Sten; Kristian Kielhofner
> *Cc:* voiceops at voiceops.org
> *Subject:* Re: [VoiceOps] Splitting SIP+RTP PCAP files
>
> What's wrong with pcapsipdump? You can pipe input into that I believe... its an old tool but it still works. :-)
>   
> Nicholas Sten<nicksten at gmail.com>  wrote:
>   
>
> Kristian,
>
> Alex has an elegant and inexpensive (read: basically free!) solution 
> that you might want to check out.  Here's a brief description (I've 
> culled from a personal email, so I hope I don't misrepresent it)
>
> /So I wrote a highly parallelised, multithreaded tool that runs on 
> such a "capture box" and listens to SIP traffic intelligently.  It 
> automatically identifies the media ports involved in a call and 
> records both SIP and RTP to distinct capture files in a dated 
> directory hierarchy separated by day and hour.  The capture file 
> contains the date, time, ANI, DNIS and Call-ID./
>
> You should give him a shout: Alex Balashov <abalashov at evaristesys.com 
> <mailto:abalashov at evaristesys.com>>
>
> I can vouch for the quality and effectiveness of his solutions.
>
> -N
>
> On Wed, Jun 23, 2010 at 9:02 AM, Kristian Kielhofner 
> <kristian.kielhofner at gmail.com <mailto:kristian.kielhofner at gmail.com>> 
> wrote:
>
> Hello everyone,
>
>  Does anyone know of a tool to split PCAP files that is SIP+RTP
> aware?  Ideally I'd be able to record a PCAP file with any number of
> calls and then have a utility split that file into each separate call?
>  I'm pretty sure I've seen a utility to do this, I just can't remember
> the name...
>
> Thanks!
>
> --
> Kristian Kielhofner
> http://www.astlinux.org
> http://blog.krisk.org
> http://www.star2star.com
> http://www.submityoursip.com
> http://www.voalte.com
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org <mailto:VoiceOps at voiceops.org>
> https://puck.nether.net/mailman/listinfo/voiceops
>
>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>    
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100623/22497fc6/attachment.html>