Skip to content
lmangani edited this page Nov 19, 2014 · 1 revision

Frequently Asked Questions

CAPTAGENT FAQ

Before proceeding, please always make sure you are using the latest GIT version!


####This seems interesting, but what is captagent really useful for? What is HEP?

A: Captagent is Homer's Capture Agent. We suggest you start by getting familiar with the [http://code.google.com/p/homer/ HOMER] Project before proceeding further.


####I replaced captagent 0.8 with the new version and now I don't see any packets in HOMER DB

A: You are probably using HEP3 Encapsulation on an unsupported system. Please switch to HEP version 2:

...
        <configuration name="core_hep.conf" description="HEP Socket">
          <settings>
            <param name="version" value="2"/>
            <param name="capture-host" value="your.homer.server"/>
            <param name="capture-port" value="9000"/>
            <param name="capture-proto" value="udp"/>
            <param name="capture-id" value="2001"/>
            <param name="capture-password" value="myHep"/>
          </settings>
        </configuration>
...

If you are using Kamailio as Capture Server and wish to deploy HEP3 UDP support please pull the latest sipcapture GIT (released 31/12/2012)

http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=6eda5e28355df2f1085f0ab9d303309965c4cd4f

####I get errors related to LIBTOOL version when attempting to compile captagent

A: libtool and configure must be from the same system, try the following:

    cd captagent4/
    rm libtool && ./build.sh && ./configure

####*I get errors undefined macro: AC_TYPE_INT32_T when running ./build.sh script *

A: The AC_TYPE_*_T macros were added in Autoconf 2.59c and above


####Can captagent be used to import an existing PCAP file into HOMER DB?

A: Sure,

CAPTAGENT 4.x You can use the -D flag in command line mode to import a PCAP file.

NOTE: Please complete your [http://code.google.com/p/captagent/wiki/HOWTO XML Configuration] before running!

captagent -v -D test.pcap



CAPTAGENT 0.x If you are using the "original" captagent originally included with webHomer, use the following syntax instead:

To import a pcap to Homer with current timestamp traffic:

captagent -p 9060 -D test.pcap -s homerserver -n -r 5060-5080 

To preserve the pcap original timestamps, just use HEPv2:

captagent -p 9060 -D test.pcap -s homerserver -n -r 5060-5080 -H 2 -i 101


####I would like to contribute/extend/develop Captagent. How do I go at this?

A: Please contact us at any time