capture sip calls with dumpcap

dtwizer1992
1 ●1

hello everyone , i usually use this dumpcap to capture sip calls if is there any voice problems ;

dumpcap.exe -b files:100 -b filesize:150000 -w d:\wrlog\hak.cap -i1

Is there any way to be more specific and include only sip calls ,rtp and udp ports ?

i have a lot of useless details on this files .

thanks a lot

Chuckc
3048 ●6 ●620 ●20

Wiki page: Real-time Transport Protocol (RTP)

If using the standard sip port (sip 5060/tcp/udp/sctp # SIP), add a capture filter (-f "port 5060") to dumpcap.

To include rtp it would help to know the port range being used:
-f "portrange 6970-6999 or port 5060"

(Capture filter syntax: pcap-filter.7)

Comments

hey thanks but if i filter only for "port 5060" i miss rtp . i want to see full trace of sip call includin voice

dtwizer1992 ( Aug 27 '3 )

Answer updated to include rtp.

Chuckc ( Aug 27 '3 )

and if my callcenter use port range of 49000-49999 for rtp but my PBX use port range of 2000-5000 ? should i must put a range of 2000-49999 ?

dtwizer1992 ( Aug 27 '3 )

-f "portrange 49000-49999 or portrange 2000-5000 or port 5060"

Chuckc ( Aug 27 '3 )

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.