SNGREP would be a great tool to have!

[thoxle]

Hello all,
I was wondering if SNGrep or something similar is available on pfsense.
This would be amazingly helpful when trying to troubleshoot VOIP issues without needing to download a PCAP.

[luckman212]

@thoxle Yes.

It's in the FreeBSD package tree...
https://www.freshports.org/net/sngrep/

caveat: Install things like this at your own risk!

e.g. amd64 (or aarch64, etc)

fetch https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/sngrep-1.4.8.txz
pkg add ./sngrep-1.4.8.txz

Remember, if you get this error:

Couldn't activate capture: BIOCSETIF failed: Device not configured

It's because FreeBSD doesn't support 'any' for capture interface the way Linux does.
Use the -d flag and pass an interface name, e.g.

sngrep -d mvneta1

Here it is running on an SG-2100...

[cyber7]

@luckman212 said in SNGREP would be a great tool to have!:

fetch https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/sngrep-1.4.8.txz

Trying to fetch this file comes up with not found. Could you assist at all?

regards
cyber7 (aka Aubrey)

[thogan32]

@cyber7 Did you ever find a fix to the repository?

[cyber7]

@thogan32 nope, not any...

[kiokoman]

https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/sngrep-1.6.0.pkg
as always at your own risk

[thogan32]

@kiokoman Do you have a link fo FreeBSD 14? Your link was able to fetch but unable to install because it is the wrong architecture "pkg: wrong architecture: FreeBSD:12:amd64 instead of FreeBSD:14:amd64"

[kiokoman]

@thogan32
https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/sngrep-1.6.0.pkg

[luckman212]

Latest as of 2024-Aug is 1.7.0_1 (although the upstream github is at 1.8.2).

Link: https://pkg.freebsd.org/FreeBSD:14:amd64/latest/All/sngrep-1.7.0_1.pkg