VoIP Ethernet Capture on a ProSBC

This article applies to:	Product	Version
	SBC	3.1, 3.3

Capturing VoIP and Ethernet traffic

• Connect to the SBC using a ssh connection

• Start tbx_cli_tools_remote (type "tbx_cli_tools_remote")

The following is displayed:

Available remote hosts to control (TBX_GW_PORT=12358, local IPs 172.16.0.1 / 172.18.0.1). Press corresponding letter to
control:
   a : TB016634.tbrouter
   b : TB016635.gateway
   c : TB016635.logtrace
   d : TB016635.stream_server
   e : TB016635.tboam_app
   f : TB016635.tbrouter       <------------tbrouter
   g : TB016635.tbsnmpagent
   h : TB016635.tbsyslog
   i : TB016635.tbuctwriter
   j : TB016635.toolpack_engine
   k : TB016635.toolpack_sys_mgr
   l : TB016635.web_server

• Connect to the tbrouter application

• Start capture using the 'p' key (lowercase p), leave default parameters and press 'enter'

• Stop capture using the 'p' key (lowercase p)

Retrieve VoIP captures

VoIP capture files (pcap/Wireshark compatible) are locate here:

 /lib/tb/toolpack/tbrouter/pcap

To download the voip capture file, use sFTP on the management port. This can be done on Windows using tools like Filezilla or WinSCP. Note: There can be multiple capture files per capture session (for example, on systems with 10Gbps network devices, because Ethernet packets on these devices are spread to multiple packets processing/capture cores)