asterisk users - Jun 2010 - How to find a single call in logs

Hello everyone.

I am wondering whether there is a certain technique I should use to identify all
log lines in the asterisk/full logfile that are related to a single call.

If a user reports that something strange happened with a certain call, I'd
like to be able to easily go back and look at the asterisk/full logfile, and
look at only the lines that are relevant.

I am having some difficulty figuring out the best way to do this.

At first I thought that the best way to do it would be to locate the call in the
logs, then see what PID was used for that line in the log, and then grep
asterisk/full for that PID. I can then find the call again, but only have to
look at the lines with that PID (which seem to relate to that specific call
during that time period).

However, what I'm unclear is:

1. Are there other PIDs that could be acting on the same call at the same time?
If so, I'd be missing part of the picture if I am only looking at 1 PID.

2. Can a single call get handed off from one asterisk PID to another? In looking
at the asterisk/full logfile, I think this is true. But I am not 100% sure.

If either of these are true, what is the best way to go back and look at the
asterisk/full logfile in relation to the reported call? I would really
appreciate any input on this.

Thanks,
-
Doug Mortensen
Network Consultant
Impala Networks Inc
CCNA, MCP, Security+, A+
Linux+, Network+, Server+
.
www.impalanetworks.com
P: (505) 327-7300
F: (505) 327-7545

Every call is assigned a unique SIP channel id. I usually look for this id
and then grep the log file by this id. It looks something like
SIP/201-a08rfr7... if I remember correctly.

Zeeshan A Zakaria

--
www.ilovetovoip.com

On 2010-06-21 1:13 PM, "Douglas Mortensen" <doug at
impalanetworks.com> wrote:

Hello everyone.

I am wondering whether there is a certain technique I should use to identify
all log lines in the asterisk/full logfile that are related to a single
call.

If a user reports that something strange happened with a certain call, I'd
like to be able to easily go back and look at the asterisk/full logfile, and
look at only the lines that are relevant.

I am having some difficulty figuring out the best way to do this.

At first I thought that the best way to do it would be to locate the call in
the logs, then see what PID was used for that line in the log, and then grep
asterisk/full for that PID. I can then find the call again, but only have to
look at the lines with that PID (which seem to relate to that specific call
during that time period).

However, what I'm unclear is:

1. Are there other PIDs that could be acting on the same call at the same
time? If so, I'd be missing part of the picture if I am only looking at 1
PID.

2. Can a single call get handed off from one asterisk PID to another? In
looking at the asterisk/full logfile, I think this is true. But I am not
100% sure.

If either of these are true, what is the best way to go back and look at the
asterisk/full logfile in relation to the reported call? I would really
appreciate any input on this.

Thanks,
-
Doug Mortensen
Network Consultant
Impala Networks Inc
CCNA, MCP, Security+, A+
Linux+, Network+, Server+
.
www.impalanetworks.com
P: (505) 327-7300
F: (505) 327-7545


--
_____________________________________________________________________
-- Bandwidth and Colocation Provided by http://www.api-digital.com --
New to Asterisk? Join us for a live introductory webinar every Thurs:
              http://www.asterisk.org/hello

asterisk-users mailing list
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20100621/932f03ee/attachment-0001.htm