On 6/15/20 2:19 PM, Luca Bertoncello wrote:> Am 15.06.2020 um 20:15 schrieb Jeff LaCoursiere: > > Hi Jeff, > >> We are working on a product to analyze pcap files of VoIP calls. So far >> it does a reasonable job of analyzing the frequency distribution of >> packets in both directions, pointing out which direction packet loss / >> bad jitter occurs. If you can trap the traffic on the outside and the >> inside of your Banana Pi and send me the pcap files, I would be happy to >> run it through our analyzer as further information for you. If it shows >> DTK isn't sending packets when it should, that will be obvious, and you >> can send to them as solid evidence of their guilt :) > Thank you for your offer. > Could you say me which options I should pass to tcpdump to get all > information you need?Yes, sure, please use (replace with correct interface names): sudo tcpdump -i eth0 -s 0 -w /tmp/test0.pcap & sudo tcpdump -i eth1 -s 0 -w /tmp/test1.pcap & Try to limit the traffic to just your phone call tests (to reduce the size of the capture files). Make all your tests, then: sudo killall tcpdump tar cvzf /tmp/tests.tgz /tmp/test?.pcap Send /tmp/tests.tgz to me by email, or leave somewhere I can download. I'll run the analysis tonight and send the results to the list. Cheers, -- *Jeff LaCoursiere* STRATUSTALK, INC. / CTO Phone: *+1 703.496.4990 x108* Mobile: *+1 815.546.6599* Email: *jeff at stratustalk.com* <mailto:jeff at stratustalk.com> Website: *https://www.stratustalk.com* Address: *One Freedom Square 13th Floor Reston, VA 20190* <https://www.facebook.com/jeff.lacoursiere> <https://linkedin.com/in/jeff-lacoursiere-884361> <https://www.twitter.com/stratustalk> -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.digium.com/pipermail/asterisk-users/attachments/20200615/f8863ae2/attachment.html>
Am 15.06.2020 um 23:15 schrieb Jeff LaCoursiere: Hi> Yes, sure, please use (replace with correct interface names): > > sudo tcpdump -i eth0 -s 0 -w /tmp/test0.pcap & > sudo tcpdump -i eth1 -s 0 -w /tmp/test1.pcap &OK, I'll do it this evening (german time), since now I must go to the office... Thanks Luca Bertoncello (lucabert at lucabert.de)
Am 15.06.2020 23:15, schrieb Jeff LaCoursiere: Hi again, just a question, to be sure...>> sudo tcpdump -i eth0 -s 0 -w /tmp/test0.pcap & >> sudo tcpdump -i eth1 -s 0 -w /tmp/test1.pcap ð0 is my DSL interface and eth1 my phone interface?> Try to limit the traffic to just your phone call tests (to reduce the > size of the capture files). Make all your tests, then:Well, assuming eth0 is the DSL interface and eth1 the phone interface, I can so that: tcpdump -i dsl0 -s 0 -w /tmp/test0.pcap host tel.t-online.de & tcpdump -i phone0 -s 0 -w /tmp/test1.pcap host 192.168.200.xx (IP of my phone) & is it correct? Thanks Luca Bertoncello (lucabert at lucabert.de)
On Tuesday 16 June 2020 at 08:18:51, Luca Bertoncello wrote:> > sudo tcpdump -i eth0 -s 0 -w /tmp/test0.pcap & > > sudo tcpdump -i eth1 -s 0 -w /tmp/test1.pcap & > > eth0 is my DSL interface and eth1 my phone interface?Well, one is internal (phone) and the other is external (DT), doesn't matter which way round.> tcpdump -i dsl0 -s 0 -w /tmp/test0.pcap host tel.t-online.de & > tcpdump -i phone0 -s 0 -w /tmp/test1.pcap host 192.168.200.xx (IP of my > phone) &Looks like you name your Banana interfaces very similarly to mine :) However, I would be careful with that first one, containing "host tel.t- online.de". I don't use DT, so I can't be sure, but I guess this is the SIP server to which you register with the account credentials... It *may not* be the same machine as handles the RTP packets - that is negotiated separately between Asterisk (or the Thomson, when it's connected directly to DT) as part of the SIP INVITE / Acknowledge. So, you *could* find that you capture all of the SIP traffic and none of the RTP traffic. On the other hand, you might get everything. You can be pretty sure it's worked if you do the above and then find that the two packet capture files are approximately the same size. If the DT one is significantly smaller (by which I mean a factor of at least ten different), then omit the "host" parameter on that capture and try again... Antony. -- A few words to be cautious of between American and English: - momentarily - suspenders - chips - pants - jelly - pavement - vest - pint (and gallon) - pissed Please reply to the list; please *don't* CC me.
On 6/16/20 1:18 AM, Luca Bertoncello wrote:> Am 15.06.2020 23:15, schrieb Jeff LaCoursiere: > > Hi again, > > just a question, to be sure... > >>> sudo tcpdump -i eth0 -s 0 -w /tmp/test0.pcap & >>> sudo tcpdump -i eth1 -s 0 -w /tmp/test1.pcap & > > eth0 is my DSL interface and eth1 my phone interface? >Sure, that's fine. We will figure out which one is north/south in the analysis.>> Try to limit the traffic to just your phone call tests (to reduce the >> size of the capture files). Make all your tests, then: > > Well, assuming eth0 is the DSL interface and eth1 the phone interface, > I can so that: > > tcpdump -i dsl0 -s 0 -w /tmp/test0.pcap host tel.t-online.de & > tcpdump -i phone0 -s 0 -w /tmp/test1.pcap host 192.168.200.xx (IP of > my phone) & > > is it correct? >Perfect. Cheers, j