How do I create a Wireshark trace on the XCC satellite ?

This article describes how to start a remote Wireshark trace on the XCC satellite to analyze network problems.
(This becomes relevant in case of voice connection problems, one-way voice communication, etc.).

1.)

Open Wireshark and click on the gear icon of the "SSH remote capture".
(It is possible that this option is missing in your system, if so, you need to reinstall Wireshark and include "SSH remote capture" in the feature selection).

2.)

Once you have clicked on the gear, the following input mask will open.
Here you enter the IP of your XCC satellite and the remote SSH port "22":

3.)

Then switch to the "Authentication" tab.

Here you enter username ("root") and your password.

(The default satellite password is : A1111! if it has not already been changed when connecting to the Xphone server)

4.)

Next, go to the "Capture" tab.

Here please enter the remote interface of the satellite and a "capture command" if necessary.

You can find the name for the remote interface via the XPhone Connect administration interface by opening the satellite configuration. The name can then be seen in the “Network adapter” area (in this case “ens192”):

Alternatively you can check the interfaces with the Linux console command: " ip a ".

The remote capture command can be left empty to capture all packets, or used to filter the packets to be captured if required. Here is an example:

/usr/sbin/tcpdump -U -w - 'port 5060 or port 5092 or port 4900 or port 4901 or portrange 30000-33000'

(please adjust the ports depending on your installation / SIP gateway to be traced)

To explain:

• port 5060 and 5092 are the ports of the SIP trunks between the PBX and XCC (ports can be found in the SIP gateway)
• port 4900 and 4901 are the ports of the loopback adapter (also found in the SIP gateway)
• portrange 30000-33000 is the RDP portrange of the XCC

The value for Remote capture filter and Packets to capture is generated automatically and should not normally be edited.

5.)

Now you can click on the “Save” button. You can start the trace by selecting the “SSH remote capture” interface and clicking on the start icon:

If this is not the case, there is an error in the input (e.g. in the remote IP / remote interface or the capture command).