Debug Capturing On Physical Voip Interfaces - AudioCodes Mediant 4000 SBC User Manual

User's Manual
Copy this file
...\dtds\cdr.dtd
...\plugins\<Wireshark ver.>\*.dll
...\tpncp\tpncp.dat
4. Start Wireshark.
5. In the Filter field, type "acdr" (see the figure below) to view the debug recording
messages. Note that the source IP address of the messages is always the OAMP IP
address of the device.
The device adds the header "AUDIOCODES DEBUG RECORDING" to each debug
recording message, as shown below:

53.3.3 Debug Capturing on Physical VoIP Interfaces

You can capture traffic on the device's physical (Ethernet LAN) VoIP interfaces (Layer-2
VLAN tagged packets). The captured traffic can be saved in a PCAP-format file (suitable
for Wireshark) to a TFTP (default) or an FTP server. The generated PCAP file is in the
Extensible Record Format (ERF). The maximum file size of debug captures that can be
saved to the device is 100 MB.
To capture traffic on physical VoIP interfaces, use the following CLI commands:

Starts physical VoIP debug capture:
# debug capture voip physical eth-lan
# debug capture voip physical start

Captures packets continuously in a cyclical buffer (packets always captured until stop
command):
# debug capture VoIP physical cyclic buffer

Retrieves latest capture (PCAP file) saved on a specified server:
Version 7.2
53. Syslog and Debug Recording
To this folder on your PC
Wireshark\dtds\
Wireshark\plugins\<Wireshark ver.>
Wireshark\tpncp
775 Mediant 4000 SBC