...
| Table of Contents |
|---|
What is sngrep?
sngrep is a terminal tool that groups SIP (Session Initiation Protocol) Messages by Call-Id, and displays them in arrow flows similar to the used in SIP RFCs.
...
Capture SIP packets from devices or read from PCAP file
Supports UDP, TCP and TLS (partially) transports
Allows filtering using BPF (Berkeley Packet Filter)
Save captured packets to PCAP file
Installing
To install sngrep you will need:
...
| Code Block |
|---|
sngrep port 5060
|
Or displaying SIP packets from eth0 device thathasassourceor destiny 192.168.0.50 through the 5061port, saving them to /tmp/sip_capture.pcap
| Code Block |
|---|
sngrep -d eth0 -O /tmp/sip_capture.pcap host 192.168.0.50 port 5061
|
Or displaying all SIP packets for a given host in sip_capture.pcapPCAPfile
| Code Block |
|---|
sngrep -I /tmp/sip_capture.pcap host 10.10.1.50
|
Using
...
The most typical use willbeto dolivemonitoring of calls.
...