2010/5/18 Klaus Darilion <klaus.mailinglists(a)pernau.at>at>:
1. install ngrep
apt-get install ngrep
2. capture the SIP traffic
ngrep -d any -W byline -t -q -P "" port 5060
-d any: sniff on every interface (sometimes messages get lopped via the
loopback interface, using -d any shows you alos the looped messages).
-W byline: nice line-break
-t: timestamp
-q: quiet mode
-P "": replace non printable charcaters with "" (e.g. CR LF)
finally the capture filter: port 5060
Or just use ngrep-sip script:
http://dev.sipdoc.net/projects/sip-stuff/wiki/Ngrep-SIP
:)
--
Iñaki Baz Castillo
<ibc(a)aliax.net>