search
Returns data based upon filtered json
post/search/call/decode/message
Request body
Example request
{
"param": {
"limit": 200,
"whitelist": [
"192.1698.10.20"
]
},
"timestamp": {
"from": 1581793200000,
"to": 1581879599000
}
}Response
MessageDecoded
Example response
{
"data": [
{
"decoded": [
{
"_source": {
"_layers": {
"eth": {
"eth.dst": "06:3d:20:12:10:20",
"eth.dst_tree": {
"eth.addr": "06:3d:20:12:10:20",
"eth.addr_resolved": "06:3d:20:12:10:20",
"eth.dst_resolved": "06:3d:20:12:10:20",
"eth.ig": "0",
"eth.lg": "1"
},
"eth.src": "02:5d:69:74:20:12",
"eth.src_tree": {
"eth.addr": "02:5d:69:74:20:12",
"eth.addr_resolved": "02:5d:69:74:20:12",
"eth.ig": "0",
"eth.lg": "1",
"src_resolved": "02:5d:69:74:20:12"
},
"eth.type": "\"0x00000800\""
},
"frame": {
"frame.cap_len": "1058",
"frame.encap_type": "1",
"frame.ignored": "0",
"frame.interface_id": "0",
"frame.interface_id_tree": {
"frame.interface_name": "-"
},
"frame.len": "1058",
"frame.marked": "0",
"frame.number": "1",
"frame.offset_shift": "0.000000000",
"frame.protocols": "eth:ethertype:ip:udp:sip:sdp",
"frame.time": "Sep 30, 2021 07:06:10.950000000 UTC",
"frame.time_delta": "0.000000000",
"frame.time_delta_displayed": "0.000000000",
"frame.time_epoch": "1632985570.950000000",
"frame.time_relative": "0.000000000"
},
"ip": {
"ip.checksum": "0x0000ffa5",
"ip.checksum.status": "2",
"ip.dsfield": "0x0000ffa5",
"ip.dsfield_tree": {
"ip.dsfield_tree.dscp": "0",
"ip.dsfield_tree.ecn": "0"
},
"ip.dst": "127.0.0.1",
"ip.dst_host": "127.0.0.1",
"ip.flags": "0x00000000",
"ip.flags_tree": {
"ip.flags_tree.df": "0",
"ip.flags_tree.mf": "0",
"ip.flags_tree.rb": "0"
},
"ip.frag_offset": "0",
"ip.hdr_len": "20",
"ip.host": "127.0.0.1",
"ip.id": "0x00000000",
"ip.len": "1044",
"ip.proto": "17",
"ip.src": "127.0.0.1",
"ip.src_host": "127.0.0.1",
"ip.ttl": "54",
"ip.version": "4"
},
"sip": {
"sip.Request-line": "INVITE sip:196@example.com;user=phone SIP/2.0",
"sip.Request-line_tree": {
"sip.Method": "INVITE",
"sip.Request-line_tree": {
"sip.r-uri.host": "example.com",
"sip.r-uri.user": "196"
},
"sip.r-uri": "sip:196@example.com;user=phone",
"sip.resend": "0"
},
"sip.msg_body": {
"sdp.connection_info": "\"IN IP4 192.168.10.193\"",
"sdp.media": "audio 5004 RTP/AVP 0 8 9 18 101",
"sdp.media_attr": "fmtp:101 0-15",
"sdp.media_attr_tree": {
"sdp.fmtp.parameter": "0-15",
"sdp.media.format": "101",
"sdp.media_attribute.field": "fmtp"
},
"sdp.media_tree": {
"sdp.media.format": "DynamicRTP-Type-101",
"sdp.media.media": "audio",
"sdp.media.port": "5004",
"sdp.media.port_string": "5004",
"sdp.media.proto": "RTP/AVP"
},
"sdp.owner": "hepgenjs 8000 8000 IN IP4 192.168.10.193",
"sdp.owner_tree": {
"sdp.owner.address": "192.168.10.193",
"sdp.owner.address_type": "IP4",
"sdp.owner.network_type": "IN",
"sdp.owner.sessionid": "8000",
"sdp.owner.username": "hepgenjs",
"sdp.owner.version": "8000"
},
"sdp.session_name": "\"SIP Call\"",
"sdp.time": "\"0 0\"",
"sdp.time_tree": {
"sdp.time.start": "0",
"sdp.time.stop": "0"
},
"sdp.version": "0",
"sip.connection_info_tree": {
"sdp.connection_info.address": "192.168.10.193",
"sdp.connection_info.address_type": "IP4",
"sdp.connection_info.network_type": "IN"
}
},
"sip.msg_hdr": "\"Via: SIP/2.0/UDP 192.168.10.193:5064;branch=z9hG4bK923381359;rport\\r\\nFrom: <sip:hepgenjs@example.com;user=phone>;tag=415746302\\r\\nTo: <sip:196@example.com;user=phone>\\r\\nCall-ID: a6xh18@127.0.0.1\\r\\nCSeq: 440 INVITE\\r\\nContact: <sip:hepgenjs@192.168.10.193:5064;user=phone>\\r\\nMax-Forwards: 70\\r\\nUser-Agent: HEPGEN.JS@example.com\\r\\nPrivacy: none\\r\\nP-Preferred-Identity: <sip:hepgenjs@example.com;user=phone>\\r\\nSupported: replaces, path, timer, eventlist\\r\\nAllow: INVITE, ACK, OPTIONS, CANCEL, BYE, SUBSCRIBE, NOTIFY, INFO, REFER, UPDATE, MESSAGE\\r\\nContent-Type: application/sdp\\r\\nAccept: application/sdp, application/dtmf-relay\\r\\nContent-Length: 313\\r\\n\\r\\nv=0\\r\\no=hepgenjs 8000 8000 IN IP4 192.168.10.193\\r\\ns=SIP Call\\r\\nc=IN IP4 192.168.10.193\\r\\nt=0 0\\r\\nm=audio 5004 RTP/AVP 0 8 9 18 101\\r\\na=sendrecv\\r\\na=rtpmap:0 PCMU/8000\\r\\na=ptime:20\\r\\na=rtpmap:8 PCMA/8000\\r\\na=rtpmap:9 G722/8000\\r\\na=rtpmap:18 G729/8000\\r\\na=fmtp:18 annexb=no\\r\\na=rtpmap:101 telephone-event/8000\\r\\na=fmtp:101 0-15\\r\\n\\r\\n\\r\\n\""
},
"udp": {
"udp.checksum": "0x0000ffa5",
"udp.checksum.status": "2",
"udp.dstport": "5060",
"udp.length": "1024",
"udp.port": "5060",
"udp.srcport": "5060",
"udp.stream": "0"
}
}
},
"_type": "pcap_file"
}
]
}
]
}