Menu

#40 pcapsipdump does not dump all sip calls

0.2
open
nobody
None
5
2020-05-05
2020-05-05
No

Given a decent size dump (96 MB). pcapsipdump is not dumping all of the calls that would otherwise be visible in wireshark.

I'm using the following commandline:
pcapsipdump -v 5 -r /tmp/sip_dump -d /tmp/dumpcaps/%Y%m%d/%H/%Y%m%d-%H%M%S-%f-%t-%i.pcap

markm {/tmp/dumpcaps/20200502/16} kobaz$ ls -al | grep 1615
-rw-r--r-- 1 kobaz kobaz 1.2K May 5 11:39 20200502-161237-unavailable-c30101-101-167453dd2ee43161545331bd4dbdda3c@63.76.55.157_5060.pcap
markm {/tmp/dumpcaps/20200502/16} kobaz$

Meanwhile: wireshark shows an entire page of calls from the original /tmp/sip_dump file (screenshot)
in the 1615 time range

1 Attachments

Discussion


Log in to post a comment.