Hi Paul,
I think your best shot would Either be to write something yourself based on libpcap, or do something with ngrep like :
#!/some/perl/like/lanuage/or/other/scripting/language
$numbers = `mysql -user -pheslo -e"use ser;select username from subscriber"; $foo=0; while($foo >count($numbers)){
`ngrep -W byline -T $number[$foo] port 5060>>$number[$foo]`; $foo++;
};
- Atle
* Iqbal iqbal@gigo.co.uk [051003 17:47]:
but ngreeping each account into separate files, but day and time, anyone scripted this :-)
The vlan is okay, once I get this SPAN port business worked out
Iqbal
Paul Hazlett wrote:
Iqbal,
I'm by no means a network expert, but if you're looking for a way to make sure your network monitoring for SIP messages doesn't impact your SIP routers then I'd take a stab at the problem by using a VLAN switch that can do port mirroring.
Then you can use NGREP on a maching that is connected to a mirrored port on the VLAN switch.
Regards, Paul
On 10/3/05, Iqbal iqbal@gigo.co.uk wrote:
Hi
Has anyone come up with a scalable method to log the complete SIP trace of ALL calls, i.e to separate files etc Ngrep is greate for a few, but I want to be able to track all calls, for various purposes
Iqbal
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers
.
Serusers mailing list serusers@lists.iptel.org http://lists.iptel.org/mailman/listinfo/serusers