[SR-Users] Need example of Kamailio.cfg for a port mirror setup
Nelson Pereira
kitkat0981 at gmail.com
Fri Feb 17 17:09:33 CET 2012
nevermind.... Got it working...
Now I need to change the kamailio.cfg to accept the packets sent from the
captagent.... Not sure what to change...
On Fri, Feb 17, 2012 at 10:49 AM, Nelson Pereira <kitkat0981 at gmail.com>wrote:
> I have libpcap, it's in /usr/lib64 but it's libpcap0.9.8
>
> >:/usr/local/src/captagent # find / |grep libpcap
> /usr/share/doc/packages/libpcap-devel
> /usr/share/doc/packages/libpcap-devel/pcap.xml
> /usr/share/doc/packages/libpcap-devel/pcap.html
> /usr/share/doc/packages/libpcap-devel/pcap.txt
> /usr/share/doc/packages/libpcap0
> /usr/share/doc/packages/libpcap0/LICENSE
> /usr/share/doc/packages/libpcap0/TODO
> /usr/share/doc/packages/libpcap0/CREDITS
> /usr/share/doc/packages/libpcap0/README.linux
> /usr/share/doc/packages/libpcap0/README
> /usr/share/doc/packages/libpcap0/CHANGES
> /usr/lib64/libpcap.a
> /usr/lib64/libpcap.so.0.9.8
> /usr/lib64/libpcap.so
> /usr/lib64/libpcap.so.0
>
>
> On Fri, Feb 17, 2012 at 10:38 AM, Max Mühlbronner <mm at 42com.com> wrote:
>
>> This is a multi-part message in MIME format.
>> --------------070003040807050803020008
>> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>> Content-Transfer-Encoding: 8bit
>>
>> Hi,
>>
>> you are missing libpcap0.8 which is a dependency for the captagent.
>>
>>
>> BR
>>
>> Max M.
>>
>> Am 17.02.2012 16:31, schrieb Nelson Pereira:
>> > ok, tried to do the make install, getting the bellow:
>> > aurast:/usr/local/src/captagent # /usr/local/bin/captagent
>> > /usr/local/bin/captagent: error while loading shared libraries:
>> > libpcap.so.0.8: cannot open shared object file: No such file or
>> directory
>> >
>> > Do i need to compile this?
>> >
>> > Also just tried running the captagent:
>> > aurast:/usr/local/src/captagent # ./captagent
>> > ./captagent: error while loading shared libraries: libpcap.so.0.8:
>> > cannot open shared object file: No such file or directory
>> >
>> > What am I doing wrong?
>> >
>> > This is a SUSE SLES11 64bit server running asterisk 1.8.6
>> >
>> > Thanks
>> >
>> >
>> >
>> > On Fri, Feb 17, 2012 at 10:24 AM, Nelson Pereira <kitkat0981 at gmail.com
>> > <mailto:kitkat0981 at gmail.com>> wrote:
>> >
>> > from the atttached kamailio.cfg file, what should be changed to
>> > get captagent receiver working in kamailio instead of port
>> mirroring?
>> >
>> > Thanks
>> >
>> >
>> > On Fri, Feb 17, 2012 at 7:29 AM, Alexandr Dubovikov
>> > <voip at start4.info <mailto:voip at start4.info>> wrote:
>> >
>> >
>> > The link has been not changed, you know it already:
>> >
>> > http://code.google.com/p/homer/wiki/HOWTO
>> >
>> > Homer Capture Agent (for all other unsupported system)
>> >
>> > if your SIP system (PBX, proxy) doesn't have a built-in
>> > capture agent with HEP or IPIP encapsulation support, you can
>> > use Homer Capture Agent (captagent). This is an external
>> > application (daemon) that collect SIP messages thru PCAPlib
>> > and send them to your capture server. The captagent support
>> > IPv4 and IPv6.
>> >
>> > preventing your next question: the captagent your can find in
>> > the git.
>> >
>> > http://code.google.com/p/homer/source/browse/
>> >
>> >
>> > Wbr,
>> > Alexandr
>> >
>> >
>> >
>> > 17.02.2012 13:15, Nelson Pereira wrote:
>> >> Can captagent be installed on a asterisk server? If so, is
>> >> there a howto?
>> >>
>> >> Sent from my iPhone4 on IOS4
>> >>
>> >> On Feb 17, 2012, at 7:07 AM, Alexandr Dubovikov
>> >> <voip at start4.info <mailto:voip at start4.info>> wrote:
>> >>
>> >>> Hi,
>> >>>
>> >>> start two captagents instance, each on own interface and
>> >>> duplicate all traffic to your kamailio node. (HEP protocol)
>> >>>
>> >>> Wbr,
>> >>> Alexandr
>> >>>
>> >>> 16.02.2012 17:51, Nelson Pereira wrote:
>> >>>> I would like to know if someone can show me an example of
>> >>>> there setup configuration in kamailio.cfg for capturing
>> >>>> packets comming in from a mirror port.
>> >>>> The reason I ask is that if I do a TCPDUMP on the server, I
>> >>>> see all traffic to and from different sources on my Voice
>> >>>> network.
>> >>>>
>> >>>> But when I use Homer SIPCAPTURE which uses Kamailio in the
>> >>>> background, I only see traffic sent FROM my PBX but not
>> >>>> seing the traffic comming back to it.
>> >>>>
>> >>>> I mean I only see one side of the call, yet TCPDUMP
>> >>>> confirmed I see everything....
>> >>>>
>> >>>> What am I missing ?
>> >>>>
>> >>>> Thanks
>> >>>>
>> >>>> NP
>> >>>>
>> >>>>
>> >>>> _______________________________________________
>> >>>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>> mailing list
>> >>>> sr-users at lists.sip-router.org <mailto:
>> sr-users at lists.sip-router.org>
>> >>>>
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> >>>
>> >>> _______________________________________________
>> >>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>> >>> mailing list
>> >>> sr-users at lists.sip-router.org
>> >>> <mailto:sr-users at lists.sip-router.org>
>> >>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> >>
>> >>
>> >> _______________________________________________
>> >> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>> mailing list
>> >> sr-users at lists.sip-router.org <mailto:
>> sr-users at lists.sip-router.org>
>> >> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> >
>> >
>> > _______________________________________________
>> > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users
>> > mailing list
>> > sr-users at lists.sip-router.org
>> > <mailto:sr-users at lists.sip-router.org>
>> > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> >
>> >
>> >
>> >
>> >
>> > _______________________________________________
>> > SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> > sr-users at lists.sip-router.org
>> > http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>
>>
>> --
>> 42com Telecommunication GmbH
>> Straße der Pariser Kommune 12-16 / D-10243 Berlin
>>
>> E-mail: mm at 42com.com
>> Homepage: www.42com.com
>>
>> Firmenangaben/Company information:
>>
>> Handelsregister/Commercial register: Amtsgericht Berlin HRB 99071 B
>> Umsatzsteuer-ID/VAT-ID: DE223812306, Geschäftsführer/CEO: Thomas Reinig,
>> Alexander Reinig
>>
>>
>> Diese E-Mail enthält Informationen von 42com Telecommunication GmbH.
>> Diese sind möglicherweise vertraulich und ausschließlich für den Adressaten
>> bestimmt. Sollten Sie diese elektronische Nachricht irrtümlicherweise
>> erhalten haben, so informieren Sie uns bitte unverzüglich telefonisch oder
>> per E-Mail.
>>
>> This message is intended only for the use of the individual or entity to
>> which it is addressed. If you have received this message in error, please
>> delete the message and notify us immediately.
>>
>>
>> --------------070003040807050803020008
>> Content-Type: text/html; charset=ISO-8859-1
>> Content-Transfer-Encoding: 7bit
>>
>> <html>
>> <head>
>> <meta content="text/html; charset=ISO-8859-1"
>> http-equiv="Content-Type">
>> </head>
>> <body bgcolor="#FFFFFF" text="#000000">
>> Hi,<br>
>> <br>
>> you are missing libpcap0.8 which is a dependency for the captagent.<br>
>> <br>
>> <br>
>> BR<br>
>> <br>
>> Max M.<br>
>> <br>
>> Am 17.02.2012 16:31, schrieb Nelson Pereira:
>> <blockquote
>> cite="
>> mid:CAC6cfSgZgOJQ0-X5ANsHEQnmt+AvV96404dU_nr53dTNdbcUoA at mail.gmail.com"
>> type="cite">ok, tried to do the make install, getting the bellow:
>> <div>
>> <div>aurast:/usr/local/src/captagent #
>> /usr/local/bin/captagent</div>
>> <div>/usr/local/bin/captagent: error while loading shared
>> libraries: libpcap.so.0.8: cannot open shared object file: No
>> such file or directory</div>
>> <div><br>
>> </div>
>> <div>Do i need to compile this?</div>
>> <div><br>
>> </div>
>> <div>Also just tried running the captagent:</div>
>> <div>
>> <div>aurast:/usr/local/src/captagent # ./captagent</div>
>> <div>./captagent: error while loading shared libraries:
>> libpcap.so.0.8: cannot open shared object file: No such file
>> or directory</div>
>> <div><br>
>> </div>
>> </div>
>> <div>What am I doing wrong?</div>
>> <div><br>
>> </div>
>> <div>This is a SUSE SLES11 64bit server running asterisk
>> 1.8.6</div>
>> <div><br>
>> </div>
>> <div>Thanks</div>
>> <div><br>
>> </div>
>> <div><br>
>> </div>
>> <br>
>> <div class="gmail_quote">
>> On Fri, Feb 17, 2012 at 10:24 AM, Nelson Pereira <span
>> dir="ltr"><<a moz-do-not-send="true"
>> href="mailto:kitkat0981 at gmail.com">kitkat0981 at gmail.com
>> </a>></span>
>> wrote:<br>
>> <blockquote class="gmail_quote" style="margin:0 0 0
>> .8ex;border-left:1px #ccc solid;padding-left:1ex">
>> from the atttached kamailio.cfg file, what should be changed
>> to get captagent receiver working in kamailio instead of
>> port mirroring?
>> <div><br>
>> </div>
>> <div>Thanks</div>
>> <div class="HOEnZb">
>> <div class="h5">
>> <div><br>
>> <br>
>> <div class="gmail_quote">
>> On Fri, Feb 17, 2012 at 7:29 AM, Alexandr Dubovikov
>> <span dir="ltr"><<a moz-do-not-send="true"
>> href="mailto:voip at start4.info" target="_blank">
>> voip at start4.info</a>></span>
>> wrote:<br>
>> <blockquote class="gmail_quote" style="margin:0 0 0
>> .8ex;border-left:1px #ccc solid;padding-left:1ex">
>> <div bgcolor="#FFFFFF" text="#000000"> <br>
>> The link has been not changed, you know it
>> already:<br>
>> <br>
>> <a moz-do-not-send="true"
>> href="http://code.google.com/p/homer/wiki/HOWTO"
>> target="_blank">
>> http://code.google.com/p/homer/wiki/HOWTO</a><br>
>> <br>
>> Homer Capture Agent (for all other unsupported
>> system)<br>
>> <br>
>> if your SIP system (PBX, proxy) doesn't have a
>> built-in capture agent with HEP or IPIP
>> encapsulation support, you can use Homer Capture
>> Agent (captagent). This is an external
>> application (daemon) that collect SIP messages
>> thru PCAPlib and send them to your capture
>> server. The captagent support IPv4 and IPv6.<br>
>> <br>
>> preventing your next question: the captagent
>> your can find in the git.<br>
>> <br>
>> <a moz-do-not-send="true"
>> href="
>> http://code.google.com/p/homer/source/browse/"
>> target="_blank">
>> http://code.google.com/p/homer/source/browse/</a><br>
>> <br>
>> <br>
>> Wbr,<br>
>> Alexandr
>> <div>
>> <div><br>
>> <br>
>> <br>
>> 17.02.2012 13:15, Nelson Pereira wrote:
>> <blockquote type="cite">
>> <div>Can captagent be installed on a
>> asterisk server? If so, is there a
>> howto?<br>
>> <br>
>> Sent from my iPhone4 on IOS4</div>
>> <div><br>
>> On Feb 17, 2012, at 7:07 AM, Alexandr
>> Dubovikov <<a moz-do-not-send="true"
>> href="mailto:voip at start4.info"
>> target="_blank">voip at start4.info</a>>
>>
>> wrote:<br>
>> <br>
>> </div>
>> <blockquote type="cite">
>> <div> Hi,<br>
>> <br>
>> start two captagents instance, each on
>> own interface and duplicate all
>> traffic to your kamailio node. (HEP
>> protocol)<br>
>> <br>
>> Wbr,<br>
>> Alexandr<br>
>> <br>
>> 16.02.2012 17:51, Nelson Pereira
>> wrote:
>> <blockquote type="cite">I would like
>> to know if someone can show me an
>> example of there setup configuration
>> in kamailio.cfg for capturing
>> packets comming in from a mirror
>> port.
>> <div>The reason I ask is that if I
>> do a TCPDUMP on the server, I see
>> all traffic to and from different
>> sources on my Voice network.</div>
>> <div><br>
>> </div>
>> <div>But when I use Homer SIPCAPTURE
>> which uses Kamailio in the
>> background, I only see traffic
>> sent FROM my PBX but not seing the
>> traffic comming back to
>> it. </div>
>> <div><br>
>> </div>
>> <div>I mean I only see one side of
>> the call, yet TCPDUMP confirmed I
>> see everything....</div>
>> <div><br>
>> </div>
>> <div>What am I missing ?</div>
>> <div><br>
>> </div>
>> <div>Thanks</div>
>> <div><br>
>> </div>
>> <div>NP</div>
>> <br>
>> <fieldset></fieldset>
>> <br>
>>
>> <pre>_______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> <a moz-do-not-send="true" href="mailto:sr-users at lists.sip-router.org"
>> target="_blank">sr-users at lists.sip-router.org</a>
>> <a moz-do-not-send="true" href="
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
>> target="_blank">
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
>> </pre>
>> </blockquote>
>> <br>
>> </div>
>> </blockquote>
>> <blockquote type="cite">
>>
>> <div><span>_______________________________________________</span><br>
>> <span>SIP Express Router (SER) and
>> Kamailio (OpenSER) - sr-users
>> mailing list</span><br>
>> <span><a moz-do-not-send="true"
>> href="mailto:
>> sr-users at lists.sip-router.org"
>> target="_blank">
>> sr-users at lists.sip-router.org</a></span><br>
>> <span><a moz-do-not-send="true"
>> href="
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
>> target="_blank">
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>> </a></span><br>
>> </div>
>> </blockquote>
>> <br>
>> <fieldset></fieldset>
>> <br>
>>
>> <pre>_______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> <a moz-do-not-send="true" href="mailto:sr-users at lists.sip-router.org"
>> target="_blank">sr-users at lists.sip-router.org</a>
>> <a moz-do-not-send="true" href="
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
>> target="_blank">
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
>> </pre>
>> </blockquote>
>> <br>
>> </div>
>> </div>
>> </div>
>> <br>
>> _______________________________________________<br>
>> SIP Express Router (SER) and Kamailio (OpenSER) -
>> sr-users mailing list<br>
>> <a moz-do-not-send="true"
>> href="mailto:sr-users at lists.sip-router.org"
>> target="_blank">sr-users at lists.sip-router.org
>> </a><br>
>> <a moz-do-not-send="true"
>> href="
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users"
>> target="_blank">
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
>> <br>
>> </blockquote>
>> </div>
>> <br>
>> </div>
>> </div>
>> </div>
>> </blockquote>
>> </div>
>> <br>
>> </div>
>> <br>
>> <fieldset class="mimeAttachmentHeader"></fieldset>
>> <br>
>> <pre wrap="">_______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> <a class="moz-txt-link-abbreviated" href="mailto:
>> sr-users at lists.sip-router.org">sr-users at lists.sip-router.org</a>
>> <a class="moz-txt-link-freetext" href="
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users">
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a>
>> </pre>
>> </blockquote>
>> <br>
>> <br>
>> <pre class="moz-signature" cols="72">--
>> 42com Telecommunication GmbH
>> Straße der Pariser Kommune 12-16 / D-10243 Berlin
>>
>> E-mail: <a class="moz-txt-link-abbreviated" href="mailto:mm at 42com.com">
>> mm at 42com.com</a>
>> Homepage: <a class="moz-txt-link-abbreviated" href="http://www.42com.com
>> ">www.42com.com</a>
>>
>> Firmenangaben/Company information:
>>
>> Handelsregister/Commercial register: Amtsgericht Berlin HRB 99071 B
>> Umsatzsteuer-ID/VAT-ID: DE223812306, Geschäftsführer/CEO:
>> Thomas Reinig, Alexander Reinig
>>
>>
>> Diese E-Mail enthält Informationen von 42com Telecommunication GmbH.
>> Diese sind möglicherweise vertraulich und ausschließlich
>> für den Adressaten bestimmt. Sollten Sie diese elektronische Nachricht
>> irrtümlicherweise erhalten haben, so informieren Sie uns bitte
>> unverzüglich telefonisch oder per E-Mail.
>>
>> This message is intended only for the use of the individual or entity to
>> which it is addressed. If you have received this message in error, please
>> delete the message and notify us immediately.</pre>
>> </body>
>> </html>
>>
>> --------------070003040807050803020008--
>>
>>
>> _______________________________________________
>> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
>> sr-users at lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20120217/d464dd67/attachment-0001.htm>
More information about the sr-users
mailing list