19 May
2010
19 May
'10
2:01 p.m.
Am 19.05.2010 13:40, schrieb Iñaki Baz Castillo:
2010/5/18 Klaus Darilionklaus.mailinglists@pernau.at:
- install ngrep
apt-get install ngrep
- capture the SIP traffic
ngrep -d any -W byline -t -q -P "" port 5060
-d any: sniff on every interface (sometimes messages get lopped via the loopback interface, using -d any shows you alos the looped messages). -W byline: nice line-break -t: timestamp -q: quiet mode -P "": replace non printable charcaters with "" (e.g. CR LF) finally the capture filter: port 5060
Or just use ngrep-sip script:
Ah, nice.
ngrep-sip proto \tcp and port 25
^^^^ What for are the back slashes needed here?
regards Klaus