Lite Mode (Direct PCAP Sniffing)

Lite Mode allows you to deploy CXMind without making any configuration changes to your existing PBX (e.g., FreeSWITCH or Asterisk). It uses network interface sniffing (libpcap) to transparently capture SIP and RTP packets directly off the wire.

Architecture

In this mode, the CXMind Ingestion Node must sit on the exact same subnet as your PBX, or your core switch must be configured with Port Mirroring (e.g., SPAN / RSPAN) to forward all PBX VLAN traffic to a dedicated CXMind server interface.

Configuration

Edit /etc/cxmind/config.yaml to enable the BPF (Berkeley Packet Filter) sniffer:

ingestion:
  mode: "sniffer"
  sniffer:
    interface: "eth0"
    bpf_filter: "udp port 5060 or udp portrange 10000-20000"
    promiscuous: true

Note: Promiscuous mode requires the Ingestion Engine Docker container to run with --net=host and elevated privileges (CAP_NET_ADMIN).