Brian, I need to doing this real time. But still tcpdump is option.
Regards, Manoj Sent from a handheld keyboard, please excuse the typos > On Feb 26, 2015, at 3:24 AM, Brian Candler <[email protected]> wrote: > >> On 26/02/2015 02:52, Manojav Sridhar wrote: >> I have come up w/ this >> >> pass in quick on pppoe0 dup-to ( re0_vlan201 192.168.100.2/32 ) inet proto >> udp from any port 5060 to any >> >> I have an ATA device making a sip connection from the LAN to IP on the >> internet port 5060 udp. I want to be able to duplicate packets that travel >> inbound on that connection to a different host to examine/log missing some >> basic understandning I think. >> >> am I on the right track? > If I were doing that, I'd just use tcpdump to capture the packets of interest: > > tcpdump -w sip.pcap -nn -i pppoe0 host x.x.x.x and udp port 5060 > > Later: > tcpdump -r sip.pcap -nnv > > _______________________________________________ > pfSense mailing list > https://lists.pfsense.org/mailman/listinfo/list > Support the project with Gold! https://pfsense.org/gold
_______________________________________________ pfSense mailing list https://lists.pfsense.org/mailman/listinfo/list Support the project with Gold! https://pfsense.org/gold
