capture sip calls with dumpcap

retag add tags

hello everyone , i usually use this dumpcap to capture sip calls if is there any voice problems ;

dumpcap.exe -b files:100 -b filesize:150000 -w d:\wrlog\hak.cap -i1

Is there any way to be more specific and include only sip calls ,rtp and udp ports ?

i have a lot of useless details on this files .

thanks a lot

Wiki page: Real-time Transport Protocol (RTP)

If using the standard sip port (sip 5060/tcp/udp/sctp # SIP), add a capture filter (-f "port 5060") to dumpcap.

To include rtp it would help to know the port range being used:
-f "portrange 6970-6999 or port 5060"

(Capture filter syntax: pcap-filter.7)

Chuckc

answered 2023-08-27 12:55:06 +0000, updated 2023-08-27 13:16:07 +0000

edit flag offensive 0 remove flag delete link

Comments

hey thanks but if i filter only for "port 5060" i miss rtp . i want to see full trace of sip call includin voice

dtwizer1992 (2023-08-27 13:11:30 +0000) edit

Answer updated to include rtp.

Chuckc (2023-08-27 13:16:58 +0000) edit

and if my callcenter use port range of 49000-49999 for rtp but my PBX use port range of 2000-5000 ? should i must put a range of 2000-49999 ?

dtwizer1992 (2023-08-27 13:40:41 +0000) edit

-f "portrange 49000-49999 or portrange 2000-5000 or port 5060"

Chuckc (2023-08-27 18:06:30 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

capture sip calls with dumpcap edit

Comments

1 Answer

Comments