New subject: Need example of Kamailio.cfg for a port mirror setup

17 Feb 2012

I have libpcap, it's in /usr/lib64 but it's libpcap0.9.8

...
 :/usr/local/src/captagent # find / |grep libpcap
/usr/share/doc/packages/libpcap-devel
/usr/share/doc/packages/libpcap-devel/pcap.xml
/usr/share/doc/packages/libpcap-devel/pcap.html
/usr/share/doc/packages/libpcap-devel/pcap.txt
/usr/share/doc/packages/libpcap0
/usr/share/doc/packages/libpcap0/LICENSE
/usr/share/doc/packages/libpcap0/TODO
/usr/share/doc/packages/libpcap0/CREDITS
/usr/share/doc/packages/libpcap0/README.linux
/usr/share/doc/packages/libpcap0/README
/usr/share/doc/packages/libpcap0/CHANGES
/usr/lib64/libpcap.a
/usr/lib64/libpcap.so.0.9.8
/usr/lib64/libpcap.so
/usr/lib64/libpcap.so.0

On Fri, Feb 17, 2012 at 10:38 AM, Max Mühlbronner &lt;mm(a)42com.com&gt; wrote:

...
  This is a multi-part message in MIME format.
 --------------070003040807050803020008
 Content-Type: text/plain; charset=ISO-8859-1; format=flowed
 Content-Transfer-Encoding: 8bit

 Hi,

 you are missing libpcap0.8 which is a dependency for the captagent.

 BR

 Max M.

 Am 17.02.2012 16:31, schrieb Nelson Pereira:
  ok, tried to do the make install, getting the
bellow:
 aurast:/usr/local/src/captagent # /usr/local/bin/captagent
 /usr/local/bin/captagent: error while loading shared libraries:
 libpcap.so.0.8: cannot open shared object file: No such file or directory

 Do i need to compile this?

 Also just tried running the captagent:
 aurast:/usr/local/src/captagent # ./captagent
 ./captagent: error while loading shared libraries: libpcap.so.0.8:
 cannot open shared object file: No such file or directory

 What am I doing wrong?

 This is a SUSE SLES11 64bit server running asterisk 1.8.6

 Thanks

 On Fri, Feb 17, 2012 at 10:24 AM, Nelson Pereira &lt;kitkat0981(a)gmail.com
 <mailto:kitkat0981@gmail.com>> wrote:

     from the atttached kamailio.cfg file, what should be changed to
     get captagent receiver working in kamailio instead of port mirroring?

     Thanks

     On Fri, Feb 17, 2012 at 7:29 AM, Alexandr Dubovikov
     &lt;voip(a)start4.info <mailto:voip@start4.info>> wrote:

         The link has been not changed, you know it already:

         http://code.google.com/p/homer/wiki/HOWTO

         Homer Capture Agent (for all other unsupported system)

         if your SIP system (PBX, proxy) doesn't have a built-in
         capture agent with HEP or IPIP encapsulation support, you can
         use Homer Capture Agent (captagent). This is an external
         application (daemon) that collect SIP messages thru PCAPlib
         and send them to your capture server. The captagent support
         IPv4 and IPv6.

         preventing your next question: the captagent your can find in
         the git.

         http://code.google.com/p/homer/source/browse/

         Wbr,
         Alexandr

         17.02.2012 13:15, Nelson Pereira wrote:
>         Can captagent be installed on a asterisk server? If so, is
>         there a howto?
>
>         Sent from my iPhone4 on IOS4
>
>         On Feb 17, 2012, at 7:07 AM, Alexandr Dubovikov
>         &lt;voip(a)start4.info <mailto:voip@start4.info>> wrote:
>
>>         Hi,
>>
>>         start two captagents instance, each on own interface and
>>         duplicate all traffic to your kamailio node. (HEP protocol)
>>
>>         Wbr,
>>         Alexandr
>>
>>         16.02.2012 17:51, Nelson Pereira wrote:
>>>         I would like to know if someone can show me an example of
>>>         there setup configuration in kamailio.cfg for capturing
>>>         packets comming in from a mirror port.
>>>         The reason I ask is that if I do a TCPDUMP on the server, I
>>>         see all traffic to and from different sources on my Voice
>>>         network.
>>>
>>>         But when I use Homer SIPCAPTURE which uses Kamailio in the
>>>         background, I only see traffic sent FROM my PBX but not
>>>         seing the traffic comming back to it.
>>>
>>>         I mean I only see one side of the call, yet TCPDUMP
>>>         confirmed I see everything....
>>>
>>>         What am I missing ?
>>>
>>>         Thanks
>>>
>>>         NP
>>>
>>>
>>>         _______________________________________________
>>>         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users 
mailing list
 >>>         sr-users(a)lists.sip-router.org
 <mailto:  sr-users(a)lists.sip-router.org&gt;
 >>>        
http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>
>>         _______________________________________________
>>         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>>         mailing list
>>         sr-users(a)lists.sip-router.org
>>         <mailto:sr-users@lists.sip-router.org>
>>         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>
>         _______________________________________________
>         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users  mailing
list
 >         sr-users(a)lists.sip-router.org 
<mailto:  sr-users(a)lists.sip-router.org&gt;

http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users 

         _______________________________________________
         SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
         mailing list
         sr-users(a)lists.sip-router.org
         <mailto:sr-users@lists.sip-router.org>
         http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

 _______________________________________________
 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
 sr-users(a)lists.sip-router.org
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users 

 --
 42com Telecommunication GmbH
 Straße der Pariser Kommune 12-16 / D-10243 Berlin

 E-mail: mm(a)42com.com
 Homepage: www.42com.com

 Firmenangaben/Company information:

 Handelsregister/Commercial register: Amtsgericht Berlin HRB 99071 B
 Umsatzsteuer-ID/VAT-ID: DE223812306, Geschäftsführer/CEO: Thomas Reinig,
 Alexander Reinig

 Diese E-Mail enthält Informationen von 42com Telecommunication GmbH. Diese
 sind möglicherweise vertraulich und ausschließlich für den Adressaten
 bestimmt. Sollten Sie diese elektronische Nachricht irrtümlicherweise
 erhalten haben, so informieren Sie uns bitte unverzüglich telefonisch oder
 per E-Mail.

 This message is intended only for the use of the individual or entity to
 which it is addressed. If you have received this message in error, please
 delete the message and notify us immediately.

 --------------070003040807050803020008
 Content-Type: text/html; charset=ISO-8859-1
 Content-Transfer-Encoding: 7bit

 <html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Hi,<br>
    <br>
    you are missing libpcap0.8 which is a dependency for the captagent.<br>
    <br>
    <br>
    BR<br>
    <br>
    Max M.<br>
    <br>
    Am 17.02.2012 16:31, schrieb Nelson Pereira:
    <blockquote
 cite="
 mid:CAC6cfSgZgOJQ0-X5ANsHEQnmt+AvV96404dU_nr53dTNdbcUoA@mail.gmail.com"
      type="cite">ok, tried to do the make install, getting the bellow:
      <div>
        <div>aurast:/usr/local/src/captagent #
 /usr/local/bin/captagent</div>
        <div>/usr/local/bin/captagent: error while loading shared
           libraries: libpcap.so.0.8: cannot open shared object file: No
           such file or directory</div>
        <div><br>
        </div>
        <div>Do i need to compile this?</div>
        <div><br>
        </div>
        <div>Also just tried running the captagent:</div>
        <div>
          <div>aurast:/usr/local/src/captagent # ./captagent</div>
          <div>./captagent: error while loading shared libraries:
             libpcap.so.0.8: cannot open shared object file: No such file
             or directory</div>
          <div><br>
          </div>
        </div>
        <div>What am I doing wrong?</div>
        <div><br>
        </div>
        <div>This is a SUSE SLES11 64bit server running asterisk 1.8.6</div>
        <div><br>
        </div>
        <div>Thanks</div>
        <div><br>
        </div>
        <div><br>
        </div>
        <br>
        <div class="gmail_quote">
          On Fri, Feb 17, 2012 at 10:24 AM, Nelson Pereira <span
            dir="ltr">&lt;<a moz-do-not-send="true"
              href="mailto:kitkat0981@gmail.com">kitkat0981@gmail.com
 </a>&gt;</span>
          wrote:<br>
          <blockquote class="gmail_quote" style="margin:0 0 0
            .8ex;border-left:1px #ccc solid;padding-left:1ex">
             from the atttached kamailio.cfg file, what should be changed
            to get captagent receiver working in kamailio instead of
            port mirroring?
             <div><br>
            </div>
            <div>Thanks</div>
            <div class="HOEnZb">
              <div class="h5">
                <div><br>
                  <br>
                  <div class="gmail_quote">
                     On Fri, Feb 17, 2012 at 7:29 AM, Alexandr Dubovikov
                     <span dir="ltr">&lt;<a
moz-do-not-send="true"
                        href="mailto:voip@start4.info"
target="_blank">
 voip(a)start4.info&lt;/a&gt;&amp;gt;&lt;/span&gt;
                    wrote:<br>
                    <blockquote class="gmail_quote" style="margin:0 0 0
                      .8ex;border-left:1px #ccc solid;padding-left:1ex">
                      <div bgcolor="#FFFFFF" text="#000000">
<br>
                         The link has been not changed, you know it
                         already:<br>
                        <br>
                        <a moz-do-not-send="true"
                          href="http://code.google.com/p/homer/wiki/HOWTO"
                          target="_blank">
 http://code.google.com/p/homer/wiki/HOWTO</a><br>
                        <br>
                         Homer Capture Agent (for all other unsupported
                         system)<br>
                        <br>
                         if your SIP system (PBX, proxy) doesn't have a
                        built-in capture agent with HEP or IPIP
                        encapsulation support, you can use Homer Capture
                        Agent (captagent). This is an external
                        application (daemon) that collect SIP messages
                        thru PCAPlib and send them to your capture
                         server. The captagent support IPv4 and IPv6.<br>
                        <br>
                         preventing your next question: the captagent
                         your can find in the git.<br>
                        <br>
                        <a moz-do-not-send="true"
                          href="
 http://code.google.com/p/homer/source/browse/"
                          target="_blank">
 http://code.google.com/p/homer/source/browse/</a><br>
                        <br>
                        <br>
                        Wbr,<br>
                        Alexandr
                        <div>
                          <div><br>
                            <br>
                            <br>
                             17.02.2012 13:15, Nelson Pereira wrote:
                             <blockquote type="cite">
                              <div>Can captagent be installed on a
                                 asterisk server? If so, is there a
                                 howto?<br>
                                <br>
                                Sent from my iPhone4 on IOS4</div>
                              <div><br>
                                 On Feb 17, 2012, at 7:07 AM, Alexandr
                                 Dubovikov &lt;<a moz-do-not-send="true"
                                  href="mailto:voip@start4.info"

target=&quot;_blank&quot;&gt;voip(a)start4.info&lt;/a&gt;&amp;gt;

                                wrote:<br>
                                <br>
                              </div>
                              <blockquote type="cite">
                                <div> Hi,<br>
                                  <br>
                                   start two captagents instance, each on
                                  own interface and duplicate all
                                  traffic to your kamailio node. (HEP
                                   protocol)<br>
                                  <br>
                                  Wbr,<br>
                                  Alexandr<br>
                                  <br>
                                   16.02.2012 17:51, Nelson Pereira
                                  wrote:
                                   <blockquote type="cite">I would like
                                     to know if someone can show me an
                                    example of there setup configuration
                                    in kamailio.cfg for capturing
                                    packets comming in from a mirror
                                    port.
                                     <div>The reason I ask is that if I
                                       do a TCPDUMP on the server, I see
                                      all traffic to and from different
                                       sources on my Voice network.</div>
                                    <div><br>
                                    </div>
                                    <div>But when I use Homer SIPCAPTURE
                                       which uses Kamailio in the
                                      background, I only see traffic
                                      sent FROM my PBX but not seing the
                                       traffic comming back to
 it.&nbsp;</div>
                                    <div><br>
                                    </div>
                                    <div>I mean I only see one side of
                                       the call, yet TCPDUMP confirmed I
                                       see everything....</div>
                                    <div><br>
                                    </div>
                                    <div>What am I missing ?</div>
                                    <div><br>
                                    </div>
                                    <div>Thanks</div>
                                    <div><br>
                                    </div>
                                    <div>NP</div>
                                    <br>
                                    <fieldset></fieldset>
                                    <br>

  <pre>_______________________________________________
 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
 <a moz-do-not-send="true"
href="mailto:sr-users@lists.sip-router.org"
 target=&quot;_blank&quot;&gt;sr-users(a)lists.sip-router.org&lt;/a&gt;
 <a moz-do-not-send="true" href="
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
 target="_blank">
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
 </pre>
                                  </blockquote>
                                  <br>
                                </div>
                              </blockquote>
                              <blockquote type="cite">

<div><span>_______________________________________________</span><br>
                                  <span>SIP Express Router (SER) and
                                    Kamailio (OpenSER) - sr-users
                                    mailing list</span><br>
                                  <span><a moz-do-not-send="true"
                                      href="mailto:
 sr-users(a)lists.sip-router.org&quot;
                                      target="_blank">
 sr-users(a)lists.sip-router.org&lt;/a&gt;&lt;/span&gt;&lt;br&gt;
                                  <span><a moz-do-not-send="true"
                                      href="
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
                                      target="_blank">
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
 </a></span><br>
                                </div>
                              </blockquote>
                              <br>
                              <fieldset></fieldset>
                              <br>

  <pre>_______________________________________________
 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
 <a moz-do-not-send="true"
href="mailto:sr-users@lists.sip-router.org"
 target=&quot;_blank&quot;&gt;sr-users(a)lists.sip-router.org&lt;/a&gt;
 <a moz-do-not-send="true" href="
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
 target="_blank">
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
 </pre>
                            </blockquote>
                            <br>
                          </div>
                        </div>
                      </div>
                      <br>
                      _______________________________________________<br>
                       SIP Express Router (SER) and Kamailio (OpenSER) -
                       sr-users mailing list<br>
                      <a moz-do-not-send="true"
                        href="mailto:sr-users@lists.sip-router.org"
                        target=&quot;_blank&quot;&gt;sr-users(a)lists.sip-router.org
 </a><br>
                      <a moz-do-not-send="true"
                        href="
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
                        target="_blank">
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><…
                      <br>
                    </blockquote>
                  </div>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
 <a class="moz-txt-link-abbreviated" href="mailto:
 sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a>
 <a class="moz-txt-link-freetext" href="
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
 </pre>
    </blockquote>
    <br>
    <br>
    <pre class="moz-signature" cols="72">--
 42com Telecommunication GmbH
 Stra&szlig;e der Pariser Kommune 12-16 / D-10243 Berlin

 E-mail: <a class="moz-txt-link-abbreviated"
href="mailto:mm@42com.com">
 mm(a)42com.com&lt;/a&gt;
 Homepage: <a class="moz-txt-link-abbreviated"
href="http://www.42com.com">
 www.42com.com</a>

 Firmenangaben/Company information:

 Handelsregister/Commercial register: Amtsgericht Berlin HRB 99071 B
 Umsatzsteuer-ID/VAT-ID: DE223812306, Gesch&auml;ftsf&uuml;hrer/CEO: Thomas
 Reinig, Alexander Reinig

 Diese E-Mail enth&auml;lt Informationen von 42com Telecommunication GmbH.
 Diese sind m&ouml;glicherweise vertraulich und ausschlie&szlig;lich
 f&uuml;r den Adressaten bestimmt. Sollten Sie diese elektronische Nachricht
 irrt&uuml;mlicherweise erhalten haben, so informieren Sie uns bitte
 unverz&uuml;glich telefonisch oder per E-Mail.

 This message is intended only for the use of the individual or entity to
 which it is addressed. If you have received this message in error, please
 delete the message and notify us immediately.</pre>
  </body>
 </html>

 --------------070003040807050803020008--

 _______________________________________________
 SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
 sr-users(a)lists.sip-router.org
 http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users

Re: [SR-Users] Need example of Kamailio.cfg for a port mirror setup