[VoiceOps] Splitting SIP+RTP PCAP files

[Brooks Bridges]

To everyone that has contacted me about this application, I'm happy to 
share with you that I have gotten approval from our CEO to release it as 
a free app, however it will be restricted in some commercial uses (e.g. 
you can't repackage it and sell it as a product, etc).

Once I have it past the lawyers and their standard "if you install this 
and it starts world war 3, it's not our fault" disclaimers that will 
have to be added, I will make a point to get it set up somewhere and 
post a link on this list and a couple others.

Please be patient.  As we all know, lawyers like to take their time so 
it appears that we're paying all that money for a reason. ;-)  Stay tuned!

Brooks R. Bridges
Telecommunications Manager
Ifbyphone, Inc.
Phone: (847) 983-3000
Fax: (847) 676-6553
bbridges at ifbyphone.com
http://www.ifbyphone.com



Brooks Bridges wrote:
>
> The utility was written by Alex as a replacement for pcapsipdump.  
> pcapsipdump suffers from severe performance and stability problems 
> with any appreciable traffic.
>
>  
>
> I can vouch that Alex's utility is very stable and efficient, but I do 
> have to take exception to the "inexpensive (read: basically free!)" 
> statement, as the utility is wholly owned (as per work-for-hire 
> agreement) by Ifbyphone, Inc.
>
>  
>
> Please contact me off-list if you would like to discuss using the 
> utility.  I do not believe there is an issue with us releasing the 
> utility "free as in beer", however I am not the one that can authorize 
> such a release.  I will have to confirm this with our upper management.
>
>  
>
> Thanks
>
>  
>
> /Brooks R. Bridges/
>
> /Telecommunications Manager/
>
> /Ifbyphone, Inc./
>
> /Phone: (847) 983-3000/
>
> /Fax: (847) 676-6553/
>
> /bbridges at ifbyphone.com/
>
> /http://www.ifbyphone.com/
>
>  
>
> *From:* voiceops-bounces at voiceops.org 
> [mailto:voiceops-bounces at voiceops.org] *On Behalf Of *Darren Schreiber
> *Sent:* Wednesday, June 23, 2010 11:58 AM
> *To:* Nicholas Sten; Kristian Kielhofner
> *Cc:* voiceops at voiceops.org
> *Subject:* Re: [VoiceOps] Splitting SIP+RTP PCAP files
>
>  
>
> What's wrong with pcapsipdump? You can pipe input into that I believe... its an old tool but it still works. :-)
>  
> Nicholas Sten <nicksten at gmail.com> wrote:
>  
>
> Kristian,
>
> Alex has an elegant and inexpensive (read: basically free!) solution 
> that you might want to check out.  Here's a brief description (I've 
> culled from a personal email, so I hope I don't misrepresent it)
>
> /So I wrote a highly parallelised, multithreaded tool that runs on 
> such a "capture box" and listens to SIP traffic intelligently.  It 
> automatically identifies the media ports involved in a call and 
> records both SIP and RTP to distinct capture files in a dated 
> directory hierarchy separated by day and hour.  The capture file 
> contains the date, time, ANI, DNIS and Call-ID./
>
> You should give him a shout: Alex Balashov <abalashov at evaristesys.com 
> <mailto:abalashov at evaristesys.com>>
>
> I can vouch for the quality and effectiveness of his solutions.
>
> -N
>
> On Wed, Jun 23, 2010 at 9:02 AM, Kristian Kielhofner 
> <kristian.kielhofner at gmail.com <mailto:kristian.kielhofner at gmail.com>> 
> wrote:
>
> Hello everyone,
>
>  Does anyone know of a tool to split PCAP files that is SIP+RTP
> aware?  Ideally I'd be able to record a PCAP file with any number of
> calls and then have a utility split that file into each separate call?
>  I'm pretty sure I've seen a utility to do this, I just can't remember
> the name...
>
> Thanks!
>
> --
> Kristian Kielhofner
> http://www.astlinux.org
> http://blog.krisk.org
> http://www.star2star.com
> http://www.submityoursip.com
> http://www.voalte.com
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org <mailto:VoiceOps at voiceops.org>
> https://puck.nether.net/mailman/listinfo/voiceops
>
>  
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> VoiceOps mailing list
> VoiceOps at voiceops.org
> https://puck.nether.net/mailman/listinfo/voiceops
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100623/1f03086f/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 5529 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://puck.nether.net/pipermail/voiceops/attachments/20100623/1f03086f/attachment.bin>