[LARTC] how to classify sip traffic (voip)
Sylvain Bertrand
sylvain at 2001-space-odyssey.net
Tue Jul 26 15:29:19 CEST 2005
On Mar 26 juillet 2005 15:02, Fabian Gervan a écrit :
> How i can classify sip traffic (voip)??
>
> I try dst 5060 udp port, but dont'work. sip sesion use dynamic port.
>
> Sniffing packets with windows net-peeker, I see that packets lenghts
> is always=87
> How i can filter, by packet lenght, with u32?
>
> Regards
> Fabian
> _______________________________________________
> LARTC mailing list
> LARTC at mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
You may want to use l7-filters and mark the packets with iptables.
Regards,
--
Sylvain Bertrand
Paris, FRANCE
+33 (0)6 64 43 17 69
More information about the LARTC
mailing list