Filtering Ip Network Traces - AudioCodes Mediant 4000 SBC User Manual

User's Manual
Parameter
Mode
mode
[LoggingFilters_Mode]

53.1.1 Filtering IP Network Traces

You can filter Syslog and debug recording messages for IP network traces, by configuring
the 'Filter Type' parameter to IP Trace in the Logging Filters table. IP traces are used to
record any IP stream, according to destination and/or source IP address, or port and Layer-
4 protocol (UDP, TCP or any other IP type as defined by http://www.iana.com). Network
traces are typically used to record HTTP.
When the IP Trace option is selected, only the 'Value' parameter is applicable; the 'Syslog'
and 'Capture Type' parameters are not relevant. The 'Value' parameter configures the
Wireshark-like filtering expressions for your IP trace. The following Wireshark-like
expressions are supported:
Table 53-2: Supported Wireshark-like Expressions for 'Value' Parameter
Expression
ip.src, ip.dst
ip.addr
ip.proto
udp, tcp, icmp, sip, ldap, http, https
udp.port, tcp.port
Version 7.2
debug recording (i.e., 'Log Destination' parameter is configured
to Debug Recording Server). The debug recording includes
signaling, Syslog messages, media, and PCM.

[5] CDR Only = Only CDRs are generated. The option is
applicable only if the 'Log Destination' parameter is configured to
Syslog Server or Local Storage. When configured to Syslog
Server, only CDRs are included in the Syslog messages
(excluding all system logs and alerts) sent to the Syslog server.

[6] Call Flow = The device sends SIP messages (in XML format),
as they occur in real-time, to OVOC for displaying SIP call dialog
sessions as call flow diagrams. For this functionality, you also
need to configure the 'Log Destination' parameter to Call Flow
Server. For enabling this functionality, see Enabling SIP Call
Flow Diagrams in OVOC on page 777.
Note:

If you configure the 'Log Destination' parameter to Local
Storage, the 'Log Type' parameter must be configured to CDR
Only.

The parameter is not applicable when the 'Filter Type' parameter
is configured to IP Trace.

To include Syslog messages in debug recording, it is
unnecessary to enable Syslog functionality.
Enables and disables the rule.

[0] Disable

[1] Enable (default)
Source and destination IP address
IP address - up to two IP addresses can be entered
IP protocol type (PDU) entered as an enumeration value
(e.g., 1 is ICMP, 6 is TCP, 17 is UDP)
Single expressions for protocol type
Transport layer
763
53. Syslog and Debug Recording
Description
Description
Mediant 4000 SBC