Viewing Log Files

Search-CsClsLogging generates log files that can be read using the same Snooper tool found in the Resource Kit download package. Open the resulting file in Snooper to inspect the traffic.

A message-by-message view of the conversation is located on the left side. Clicking any of the lines changes the view in the right-side pane to display the entire SIP message selected. Error messages are highlighted in red for easy identification. A search bar, where keywords such as a username or phone number are entered, is located at the top of the window. After you’ve entered a search string and pressed Enter, the view is filtered to display only messages with that string. This kind of filtering can be useful when searching for problems with a single user because it removes all the other traffic through the server.

Figure 14.4 displays a sample SIP trace using the Snooper tool.

Figure 14.4. Using Snooper to view a SIP trace.