AudioCodes Mediant 3000 User Manual

Version 7.0 793 Mediant 3000
User's Manual 53. Syslog and Debug Recording
Parameter Description

To include Syslog messages in DR, it is unnecessary to enable Syslog
functionality..
Mode
mode
[LoggingFilters_Mod
e]
Enables and disables the rule.
 [0] Disable
 [1] Enable (default)
53.1.1 Filtering IP Network Traces
You can filter Syslog and debug recording messages for IP network traces, by setting the
'Filter Type' parameter to IP Trace in the Logging Filters table. IP traces are used to record
any IP stream that is not associated with media (RTP/RTCP), according to destination
and/or source IP address, or port and Layer-4 protocol (UDP, TCP or any other IP type as
defined by http://www.iana.com). Network traces are typically used to record HTTP.
When the IP Trace option is selected, only the ‘Value’ parameter is applicable; the 'Syslog'
and 'Capture Type' parameters are not relevant. The 'Value' parameter configures the
Wireshark-like filtering expressions for your IP trace. The following Wireshark-like
expressions are supported:
Table 53-1: Supported Wireshark-like Expressions for 'Value' Parameter
Expression Description
ip.src, ip.dst Source and destination IP address
ip.addr IP address - up to two IP addresses can be entered
ip.proto IP protocol type (PDU) entered as an enumeration value
(e.g., 1 is ICMP, 6 is TCP, 17 is UDP)
udp, tcp, icmp, sip, ldap, http, https Single expressions for protocol type
udp.port, tcp.port Transport layer
udp.srcport, tcp.srcport Transport layer for source port
udp.dstport, tcp.dstport Transport layer for destination port
and, &&, ==, <, > Between expressions
Below are examples of configured expressions for the 'Value' parameter:

udp && ip.addr==10.8.6.55

ip.src==10.8.6.55 && udp.port>=5000 and udp.port<6000

ip.dst==10.8.0.1/16

ip.addr==10.8.6.40
For conditions requiring the "or" / "||" expression, add multiple table rows. For example, the
Wireshark condition "(ip.src == 1.1.1.1 or ip.src == 2.2.2.2) and ip.dst == 3.3.3.3" can be
configured using the following two table row entries:
1. ip.src == 1.1.1.1 and ip.dst == 3.3.3.3
2. ip.src == 2.2.2.2 and ip.dst == 3.3.3.3

AudioCodes Mediant 3000 Specifications

General

Brand	AudioCodes
Model	Mediant 3000
Category	Gateway
Language	English