On 26/02/2015 02:52, Manojav Sridhar wrote:
I have come up w/ this

pass in quick on pppoe0 dup-to ( re0_vlan201 192.168.100.2/32 <http://192.168.100.2/32> ) inet proto udp from any port 5060 to any

I have an ATA device making a sip connection from the LAN to IP on the internet port 5060 udp. I want to be able to duplicate packets that travel inbound on that connection to a different host to examine/log missing some basic understandning I think.

am I on the right track?

If I were doing that, I'd just use tcpdump to capture the packets of interest:

tcpdump -w sip.pcap -nn -i pppoe0 host x.x.x.x and udp port 5060

Later:
tcpdump -r sip.pcap -nnv

_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to