Planning to add a few network taps to our data center and roll out VoIP Monitor for packet tracing and analysis. I am looking to capture ~ 8 1G copper ports and 2 10G fiber ports. I would like to be able to filter based on VLAN, IP and port at the tap level (IP and port isn't totally necessary, but would be a nice to have). Any recommendations on taps to get me there? Thanks! Chris
If your network will support it, you can port mirror all your VoIP traffic to a single VoIPmonitor sniffer. That sniffer can do the per-IP filtering. This is now we are capturing the boxes where we cannot install the voipmon sniffer locally. VoIPmonitor will also support IPIP encapsulation in case your systems have a built-in tap feature, i.e. Sansay SBCs. For the port mirror solution, do not put the list of IPs to capture in the "filter" option or you will quickly have performance issues. VoIPmonitor has provided a new configuration option for this, "interface_ip_filter". To make managing groups of IP addresses easier, you can drop files in /etc/voipmonitor/conf.d/. Each file can have one or more "interface_ip_filter = 1.2.3.4" lines, and the service must be restarted each time a file is added/removed/changed. I don't know if any of this has made it to their documentation yet. Regards, *Calvin Ellison* Senior Voice Operations Engineer calvin.ellison at voxox.com
participants (2)
-
calvin.ellison＠voxox.com -
ctaloi＠gmail.com