Hi Sebastien, On Wed, Sep 03, 2008 at 08:02:19PM +0200, S?bastien CRAMATTE wrote:
>> a) Basic behavioural analysis. Assume all packets flying between >> >> [ ... ] >> > pffff ... seems to be very complicate ! isn't it ? ;) Well, it's the simplest approach conceptually but i get your point: it's not plug and play if compared to packet classification. As said most depends on the scenario: if it's "walled" and you are in full control of the codec and its parameters then it's easier; otherwise it gets tricky. > Most of new kernel support nf_conntrack_sip to match rtp and sip > without use of l7-filter but I don't know If pmacct is abble to > handle this ? No. And the issue with the kernel-based packet classification engine is that it remains external and has to be queried somehow - can't be just embedded. > We havent traffic under 50 Mbits. So I supose that l7-filter can > do the job. Agree. > All MTA phone are connected through Openser/Asterisk proxy/registrar. Is also the RTP passing in all cases (ie. off-net and on-net calls) through the Openser/Asterisk proxy/registrar? Such a case would ease guessing of RTP streams. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
