<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";
color:black;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Calibri;
color:blue;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'>I know using Wireshark it seems to print
a GUI latter for MGCP calls however when trying to apply a filter for the
packets based on the “VoIP Calls” section for some reason my
experience has been that it doesn’t work (haven’t tried on any
newer releases of Wireshark in a while).<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'>You’ll likely need to write your
own using libpcap or BASH/Perl scripting around tethereal. The main challenge
is that the endpoint IDs in an MGCP messages are only sent in the MGCP requests
but not on the response which means you need to find all the TIDs/IPs/etc
belonging to the endpoint transactions you’re interested in and then find
all the associated response packets based on TIDs and IPs.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'>Justin Randall<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=blue face=Calibri><span style='font-size:
10.0pt;font-family:Calibri;color:blue'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
color=black face="Times New Roman"><span style='font-size:12.0pt;color:windowtext'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 color=black face=Tahoma><span
style='font-size:10.0pt;font-family:Tahoma;color:windowtext;font-weight:bold'>From:</span></font></b><font
size=2 color=black face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma;
color:windowtext'> voiceops-bounces@voiceops.org
[mailto:voiceops-bounces@voiceops.org] <b><span style='font-weight:bold'>On
Behalf Of </span></b>Christian Pena<br>
<b><span style='font-weight:bold'>Sent:</span></b> Monday, February 22, 2010
11:38 AM<br>
<b><span style='font-weight:bold'>To:</span></b> VoiceOps<br>
<b><span style='font-weight:bold'>Subject:</span></b> [VoiceOps] Utility for
Splitting MGCP Calls from large packetcaptures?</span></font><font color=black><span
style='color:windowtext'><o:p></o:p></span></font></p>
</div>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt'>I use pcapsipdump for splitting SIP calls from large
packet capture files. It nicely gives me one file per session/call<br>
<br>
Anyone know of something that will do this for MGCP calls? <o:p></o:p></span></font></p>
<div>
<p class=MsoNormal style='margin-bottom:12.0pt'><font size=3 color=black
face="Times New Roman"><span style='font-size:12.0pt'>-- <br>
Christian Pena<br>
Network Engineer II<br>
Direct: (786) 363-0460<br>
Fax: (786) 363-0206<o:p></o:p></span></font></p>
</div>
</div>
</body>
</html>