sngrep icon indicating copy to clipboard operation
sngrep copied to clipboard

How Not to capture RTP packets in SNGREP

Open sajai20 opened this issue 1 year ago • 3 comments

Hi @Kaian do we have any option in sngrep to not capture RTP packets and only capture SIP packets to reduce high CPU utilization.

sajai20 avatar May 17 '24 06:05 sajai20

The default behaviour is to not capture RTP. It will only capture RTP if you started it with the '-r' option (or enabled it in the configuration file.)

davemidd avatar May 17 '24 07:05 davemidd

@Kaian I have one more doubt do we have any option in sngrep not to capture packets from particular IP and port let's say i don't want to capture packet flowing from particular ip and port (host 192.168.151.144 and port 9840) . in sngrep i could see we can filter particular ip and port but not to exclude them

sajai20 avatar May 20 '24 07:05 sajai20

@Kaian I have one more doubt do we have any option in sngrep not to capture packets from particular IP and port let's say i don't want to capture packet flowing from particular ip and port (host 192.168.151.144 and port 9840) . in sngrep i could see we can filter particular ip and port but not to exclude them

You should be able to use standard BPF filter syntax e.g. NOT host 1.2.3.4 and NOT port 123

(Plenty of references on the Internet e.g. https://biot.com/capstats/bpf.html)

davemidd avatar May 20 '24 07:05 davemidd