Link to home
Start Free TrialLog in
Avatar of xpandit
xpandit

asked on

Using TCPdump and Wireshark to pipe data to Voip monitor.

Hi,

I am trying to pipe data to voipmonitor on a CentOS Linux server. Essentially packets are sniffed on a Windows machine with rpcapd. I have used the following guide to configure this.

http://www.voipmonitor.org/doc/Windows_rpcapd

I then run the following command on CentOS.

/usr/src/tcpdump-4.0.0/tcpdump -q -s0 -U -n -i rpcap://10.255.255.12/\\Device\\NPF_{F910A938-3321-4ADD-80B2-9AA43B57B336} -w- | /usr/src/voipmonitor-amd64-22.6.1-static/usr/local/sbin/voipmonitor -r /dev/stdin --config-file=/etc/voipmonitor.conf

I would like to run the above as a service? How can I do that? Or better yet, how can the voipmonitor service just pick up the data retrieved with tcpdump?

I have tried adding the command above to rc.local so its executed at startup but it only works for 10 minutes before something goes wrong.
Avatar of arnold
arnold
Flag of United States of America image

The simple straightforward way to do what you want is to configure your switch port to which you would connect an interface of your centos box to be a mirror of the port where VoIP traffic is seen, it could on the feed side ...

The other option is to have the centos box as a transparent "proxy/bridge that will see every packet passing to and from this Windows system, though with this setup the risk if the centos box fails .....

Check the app VoIP monitor which shoukd include best/optimal setup to achieve the intended result.
ASKER CERTIFIED SOLUTION
Avatar of xpandit
xpandit

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of xpandit
xpandit

ASKER

Gave up