How to Capture or Filter CallingNumber and CalledNumber from one particular Originate and Terminate Gateway with H323 or SIP protocol?

[meandaneth]

Dear All,

As i an a newbie on Wireshark for VOIP troubleshooting, i need your help on filber as below:

How to Capture or Filter CallingNumber and CalledNumber from one particular Originate and Terminate Gateway with H323 or SIP protocol? Because of My gateway is already in service and many active calls are runing, i have tried to filer or find on paticular calling number on filtering but not.

Please kindly to show me.

Best Regards,

Daneth

[mrdogantr]

Hi,

     İf you can mirror (monitor session or etc..) your gateway traffic to linux, you can use "ngrep" commands.

for example:

called or calling number;

ngrep -q -W byline '0012127773456' -d eth1 "udp port 5060"

customers ip.

ngrep -q -W byline '88.88.88.88' -d eth1 "udp port 5060"

etc...

hth

Muammer

[meandaneth]

Hi,

Thanks fou your useful command.

Daneth

[Daniele Giordano · Accepted solution]

If you using Wireshark you can find the number in 2 ways.

Select EDIT and so FIND PACKET menu. Specify the find options like show in below image.

or select TELEPHONY => VOIP CALLS tools