2010/5/18 Klaus Darilion klaus.mailinglists@pernau.at:
- install ngrep
apt-get install ngrep
- capture the SIP traffic
ngrep -d any -W byline -t -q -P "" port 5060
-d any: sniff on every interface (sometimes messages get lopped via the loopback interface, using -d any shows you alos the looped messages). -W byline: nice line-break -t: timestamp -q: quiet mode -P "": replace non printable charcaters with "" (e.g. CR LF) finally the capture filter: port 5060
Or just use ngrep-sip script:
http://dev.sipdoc.net/projects/sip-stuff/wiki/Ngrep-SIP
:)