Hi All,

I spent a few hours this afternoon setting up a Homer SIP Capture server today. The build went well, good example setup howto's. My setup is a single kamailio/sipcature/homer node sitting on a LAN with 2 NIC's, eth0 for network access ssh/web, eth1 is the capture port connected to switch mirrored port. On the switch I have a kamailio proxy server being monitored.

All SIP traffic through the proxy server is logged to the homer server, but the homer server is receiving SIP packets on the capture interface and sending out SIP messages through the network access eth0 port. The messages are being processed from the on_reply route. The default config for the capture node is to capture all SIP packets, but this seems to create the problem. Here is the route and onreply_route default config:

route { sip_capture(); exit; }

onreply_route { sip_capture(); exit; }

If I replace the onreply_route exit; with drop; then the capture server no longer sends SIP messages out the eth0 interface and everything seems to work as expected.

So my question; what is the difference between a drop; and exit; within the on_reply route and how the hell is the capture server sending messages out the eth0 network interface when the server is 100% bound to eth1 capture interface?

Any insight or guidance is appreciated.

Thanks.

JR