SIP Capture with TCPDump

About

Tcpdump, a powerful command-line packet analyzer already installed and working on your system by default.

How to use it?

Login to your server and put this command into terminal:

tcpdump -i eth0 -n -s 0 port 5060 -vvv -w /home/capture_file_name

Packets will be saved to directory /home/capture_file_name

You can send captured file capture.pcap from your server and open with Wireshark GUI and analyse the packets.

Full command explaining

You can find full command explaining here:

http://www.jonathanmanning.com/2009/10/26/how-to-voip-sip-capture-with-tcpdump-on-linux/

See also:

• How to capture packets using wireshark