heplify only capturing when running tcpdump in parallel - Githubissues

sipcapture / heplify

Portable and Lightweight HEP Capture Agent for HOMER

https://sipcapture.org

GNU Affero General Public License v3.0

181 stars 65 forks source link

heplify only capturing when running tcpdump in parallel #195

Closed astrakid closed 3 years ago

astrakid commented 3 years ago

hi, heplify is started by systemd and is running on "hep01" logfile is empty and no HEPs are forwarded to my heplify-server "mon01" as soon as i start tcpdump -i ens192 on hep01 heplify is sending packets to mon01.

what am i missing?

edit: my command line: /opt/heplify/heplify -i ens192 -t af_packet -m SIPRTP -hi 18001 -wf /opt/pcaps -zf -hs xxx-sip01.xxxxxxxxxxx:9060 -rt 30

regards, andre

astrakid commented 3 years ago

hm. i guess the issue is that the interface doesn't start in promiscuous mode. tcpdump seems to put the interface into it during runtime...

astrakid commented 3 years ago

ip link set ens192 promisc on solved the issue. no heplify issue. sorry.