...
For example on an SBC the RTP port range might be ports 10000 - 20000. The following filter will exclude packets to/from these ports and therefore not capture RTP packets:
Code Block |
---|
not portrange 10000-20000 |
|
...
You can find the RTP port range on your SBC in the WebUI under Configuration -> IP Settings -> Media Interfaces.
...
only captures packets to/from port 5060:
captures only packets to/from ports 5060 to 5070:
Code Block |
---|
portrange 5060-5070 |
|
captures everything except packets to/from port 80:
captures everything except packets to/from ports 10000 to 20000:
Code Block |
---|
not portrange 10000-20000 |
|
It is also possible to combine filters. This filter captures everything except packets to/from ports 10000 to 20000 and port 80:
Code Block |
---|
not portrange 10000-20000 and not port 80 |
|
Further capture filters can be found on the tcpdump manpage.