[OpenSIPS-Users] looking for PCAP to CDR utility

Saint Michael venefax at gmail.com
Wed Apr 5 14:11:49 UTC 2023


I solved it. You can do all this with tshark
tshark -r "$input_file" -Y "sip.Call-ID == \"$call_id\"" -w
"$output_dir/$call_id.pcap"



On Wed, Apr 5, 2023 at 2:28 AM Karsten Wemheuer <kwe at temp.temp> wrote:

> Hi Frederico,
>
> I unfortunately do not know about the output format of tshark. With
> ngrep you can use "-W byline" to make sure that the SIP messages are
> displayed line by line.
>
> Have a nice weekend,
>
> Karsten
>
> Am Donnerstag, dem 30.03.2023 um 06:21 -0400 schrieb Saint Michael:
> > I am alradybusing tshark and awk, but I thought that there was some
> > tools written to do this
> >
> > Federico
> >
> > On Thu, Mar 30, 2023, 1:55 AM Karsten Wemheuer <kwem at gmx.de> wrote:
> > > Hi,
> > >
> > > maybe You can use ngrep (converting pcap to text) and than a lot of
> > > scripting in the language of Your choice.
> > >
> > > Have a nice day
> > >
> > > Karsten
> > >
> > > Am Donnerstag, dem 30.03.2023 um 01:40 -0400 schrieb Saint Michael:
> > > > Is there any command line tool for Linux (ubuntu 20.04 or better)
> > > > that can generate opensips SIP CDR from a group of large *.pcap
> > > files
> > > > that only contain SIP information?
> > > > I have not found it. I tried with tshark and it would take a lot
> > > of
> > > > coding to get this done. I am looking for these fields
> > > >
> > > >
> > > fields="method,from_tag,to_tag,callid,sip_code,sip_reason,time,orig
> > > _
> > > >
> > > fu,orig_ru,out_fu,out_ru,source_ip,dst_ip,lrn,rate,provrate,jurisd,
> > > ro
> > > >
> > > unding,minsec,singlecharge,setuptime,closetime,duration,ms_duration
> > > "
> > > >  one record per call of course
> > > >
> > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > Users mailing list
> > > > Users at lists.opensips.org
> > > > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> > >
> > >
> > > _______________________________________________
> > > Users mailing list
> > > Users at lists.opensips.org
> > > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.opensips.org
> > http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users at lists.opensips.org
> http://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensips.org/pipermail/users/attachments/20230405/fd604d8a/attachment.html>


More information about the Users mailing list