Hi Jeremy,
ACK the email. Thanks.
I looked at the trace and found that only one direction of IAX2 traffic is captured.
Unsniff looks for the remote side to issue an IAX2 ACCEPT message in response to NEW before setting up the user object. The idea here is that the remote side has an option of choosing a codec, although I rarely see the remote side disagreeing with the choice of the initiator.
Is it feasible for you to capture both directions? If not, I could add an option to allow a single leg capture (which may not always work due to the missing info about the codec from the ACCEPT message).
Thanks,