TCPdump is a powerful command-line packet analyzer, which may be used for a SIP message sniffing/analyzing. TCPdump is preinstalled on many linux distributions, or may be installed directly from debian repository:
apt-get install tcpdump
TCPdump allows write sniff to a file or display it realtime. Its usage for SIP message analysis may look like:
Ngrep is an intersting tool which may be used for SIP real time analysis. It is usable to capture SIP Messages which are flowing on/from of our SIP server.
Installation is straightforward, directly debian repository:
Ipgrab is an network protocol grab utility which may be used for a SIP message sniffing/analyzing. Ipgrab may be installed directly from debian repository:
apt-get install ipgrab
The usage for SIP message analysis may look like
Description: Homer is an Open Source SIP Capture server by Alexandr Dubovikov & Friends, based on OpenSER/Kamailio and supporting HEPv1/v2 (Homer Encapsulation Protocol) & IP proto 4 (IPIP) encapsulation and monitoring/mirroring port capture modes. Homer ships with a flexible and lightweight capture agent for unsupported scenarios and a powerful browser based UI (webHomer).
Web:
web: http://www.secdev.org/projects/scapy/
Licence: free?
web: http://www.vopsecurity.org
Download: need to be registered
Ngrep is one of networking tools usefull for VoIP (Voice Over IP) analysis. Unfortunatelly I did not find ngrep package available inside ot the yum repository, so command
yum install ngrep
does not work (SipXecs over CentOS). No problem, just few steps how to install it.
Producer: BreakPoint Software
Kamailio 3.0 provides a command line interface: sercmd. Sercmd allows to connect to running instance of Kamailio, either on same or remote system.
If we like to use it, we have to first enable the ctl module in kamailio.cfg.
SIPp version 3.2 hasn't precompiled binary packages. There are some instructions provided at the sipp home page, however small comment about limits.h is missing and therefore the compilation will not be succesfull. Here we provide instructions how to compile Sipp with SSL, pcap play and distributed pauses features enabled.
Three pre-requisites are necessary to compile SIPp:
