How Not to capture RTP packets in SNGREP

[sajai20]

Hi @Kaian do we have any option in sngrep to not capture RTP packets and only capture SIP packets to reduce high CPU utilization.

[davemidd]

The default behaviour is to not capture RTP. It will only capture RTP if you started it with the '-r' option (or enabled it in the configuration file.)

[sajai20]

@Kaian I have one more doubt do we have any option in sngrep not to capture packets from particular IP and port let's say i don't want to capture packet flowing from particular ip and port (host 192.168.151.144 and port 9840) . in sngrep i could see we can filter particular ip and port but not to exclude them

[davemidd]

@Kaian I have one more doubt do we have any option in sngrep not to capture packets from particular IP and port let's say i don't want to capture packet flowing from particular ip and port (host 192.168.151.144 and port 9840) . in sngrep i could see we can filter particular ip and port but not to exclude them

You should be able to use standard BPF filter syntax e.g. NOT host 1.2.3.4 and NOT port 123

(Plenty of references on the Internet e.g. https://biot.com/capstats/bpf.html)