31 Jul
2007
31 Jul
'07
12:57 p.m.
El Tuesday 31 July 2007 11:50:12 Marc LEURENT escribió:
Here is a ngep of the communication (what is
interesting is the )
interface: eth1 (192.168.95.0/255.255.255.0)
filter: (ip or ip6) and ( port 5060 )
#
U 192.168.95.70:5060 -> 192.168.95.248:5060
INVITE sip:0677832974@sip.wifirst.fr:5060 SIP/2.0..Via: SIP/2.0/UDP
192.168.95.70:5060;branch=z9hG4bK4696815358658109209..From: "Bob
Wifirst"<sip:102@ sip.wifirst.fr:5060;user=phone>;tag=c0a80101-3331e4..To:
<sip:0677832974@sip.wifirst.fr:5060;user=phone>..Call-ID:
5d714ab-c0a80101-0-38(a)192.168.95.70 ..CSeq: 1 INVITE..Max-Forwards:
70..Supported: timer, replaces..Session-Expires: 1800..Allow:
INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,SUBSCRIBE,NOTIFY,UPD
ATE,REFER,REGISTER,INFO..Contact:
<sip:102@192.168.95.70:5060;user=phone>..User-Agent: THOMSON ST2030 hw0
fw1.50 00-0E-50-4E-AF-C4..Content-Type: appl ication/sdp..Content-Length:
271....v=0..o=102 3355109 3355109 IN IP4 192.168.95.70..s=-..c=IN IP4
192.168.95.70..t=0 0..m=audio 41000 RTP/AVP 8 0 18 4 97..a=rtpmap:8
PCMA/8000..a=rtpmap:0 PCMU/8000..a=rtpmap:18 G729/8000..a=rtpmap:4
G723/8000..a=rtpmap:97 telephone-event/8000..a=fmtp:97 0-15..a=sen drecv..
Just a suggestion about ngrep:
It's better if you use some parameters for showing line by line the ngrep
capture. I use the folowing script:
/usr/local/bin/ngrep-sip.sh:
-------------------------------------------------------------
#!/bin/bash
# $1 is the filter field.
# 5060 is OpenSer port and 5070 Asterisk port that run in same machine.
ngrep -P '' -W byline "$1" udp port 5060 or udp port 5070
-------------------------------------------------------------
--
Iñaki Baz Castillo
ibc(a)in.ilimit.es