Start capture for a machine

Setting of the capture is done separately on each machine, not from YateMMI interface. Select the machine you want to use for running a capture and make the steps below on each machine:

Install YatePCAPS on your machine

Install YatePCAPS from packages on your machine and automatically you will install tcpdump-cap. The last one it is necessary to run a capture.

urpmi yate-pcaps

To check what products are already installed on your machine, run the following command:

ps -ef | grep yate

Access the configuration file

Access tcpdump-cap.conf file on your machine to set the equipment on you want to run a capture. This file will be shown below:

[root@srv-sig-1 stp]# cat /etc/tcpdump-cap.conf
# You should include one initial directory directive and possibly others
# before the captures that should be placed in the new directory

# directory DIRECTORY_PATH_HERE
# Set directory where captured files go
# Example: directory /home/capture

# capture BASE_FILENAME INTERFACE CAPTURE_FILTER…
# Start the following capture
# Example: capture sip any udp port 5060 or tcp port 5060

Example of configuration for tcpdump-cap.conf file:

tcpdump-cap.conf file example:
[root@srv-sig-1 stp]# vim tcpdump-cap.conf
directory /home/capture

capture sip any udp port 5060 or tcp port 5060
capture ran eth-ran udp port 4729 or udp port 9999 or udp port 23234
capture s1 eth-ran sctp port 36412 or udp port 2123 or udp port 5060 or udp port 2152

#DRA and STP 
capture dra lo sctp port 3868
capture stp lo sctp and not port 3868

# DRA / DEA Interconnects
capture VF-DEA eno3.341 greater 127 and net 62.87.67.160/29 and net 89.40.210.84/30 
capture VF-DEA-1 eno3.341 sctp and ip host 62.87.67.160 or ip host 62.87.67.161 or ip host 62.87.67.162 or ip host 62.87.67.163
capture SFR-DEA-1 eno3.331 sctp and ip host 185.109.254.60 or ip host 185.109.254.68

#SH interface debug – captures
capture x-dra-1-hssSH_prx eno2.402 tcp port 13868

#SLH interface
capture x-dra-1-hssSLH_prx eno2.402 tcp port 13869

Capture explanation:

Start capture for a machine 3

Restart, check status and run tcpdump-cap

Before to run tcpdump-cap, you should restart the product, using the following command:

To restart:   systemctl restart tcpdump-cap.service

To check status and run a service, use the following commands:

To check status:   systemctl status tcpdump-cap.service
To run:   systemctl start tcpdump-cap.service

Note: If in the interface there are no capture prefixes displayed, /etc/tcpdump-cap.conf file is not configured correctly.

To redirect to Retrieve the aggregated captures for YateMMI page click below: