SIP Capture with TCPDump

About

Tcpdump, a powerful command-line packet analyzer already installed and working on your system by default.

How to use it?

Login to your server over ssh and put this command into terminal:

tcpdump -i eth0 -n -s 0 port 5060 -vvv -w /home/capture_file_name

Packets will be saved to directory /home/capture_file_name

You can send captured file capture.pcap from your server to your PC and open with Wireshark GUI and analyse the packets.

Full command explaining

You can find full command explanation here:

http://nil.uniza.sk/network-security/analyzers/using-tcpdump-sip-diagnostic

See also

• How to capture packets using wireshark