-
-
Notifications
You must be signed in to change notification settings - Fork 75
CAPTAGENT FAQ
Before proceeding, please always make sure you are using the latest GIT version!
####This seems interesting, but what is captagent really useful for? What is HEP?
A: Captagent is Homer's Capture Agent. We suggest you start by getting familiar with the [http://code.google.com/p/homer/ HOMER] Project before proceeding further.
####I replaced captagent 0.8 with the new version and now I don't see any packets in HOMER DB
A: You are probably using HEP3 Encapsulation on an unsupported system. Please switch to HEP version 2:
...
<configuration name="core_hep.conf" description="HEP Socket">
<settings>
<param name="version" value="2"/>
<param name="capture-host" value="your.homer.server"/>
<param name="capture-port" value="9000"/>
<param name="capture-proto" value="udp"/>
<param name="capture-id" value="2001"/>
<param name="capture-password" value="myHep"/>
</settings>
</configuration>
...
If you are using Kamailio as Capture Server and wish to deploy HEP3 UDP support please pull the latest sipcapture GIT (released 31/12/2012)
http://git.sip-router.org/cgi-bin/gitweb.cgi/sip-router/?a=commit;h=6eda5e28355df2f1085f0ab9d303309965c4cd4f
####I get errors related to LIBTOOL version when attempting to compile captagent
A: libtool and configure must be from the same system, try the following:
cd captagent4/
rm libtool && ./build.sh && ./configure
####*I get errors undefined macro: AC_TYPE_INT32_T when running ./build.sh script *
A: The AC_TYPE_*_T macros were added in Autoconf 2.59c and above
####Can captagent be used to import an existing PCAP file into HOMER DB?
A: Sure,
CAPTAGENT 4.x You can use the -D flag in command line mode to import a PCAP file.
NOTE: Please complete your [http://code.google.com/p/captagent/wiki/HOWTO XML Configuration] before running!
captagent -v -D test.pcap
CAPTAGENT 0.x If you are using the "original" captagent originally included with webHomer, use the following syntax instead:
To import a pcap to Homer with current timestamp traffic:
captagent -p 9060 -D test.pcap -s homerserver -n -r 5060-5080
To preserve the pcap original timestamps, just use HEPv2:
captagent -p 9060 -D test.pcap -s homerserver -n -r 5060-5080 -H 2 -i 101
####I would like to contribute/extend/develop Captagent. How do I go at this?
A: Please at any time