sngrep is a terminal tool that groups SIP (Session Initiation Protocol) Messages by Call-Id, and displays them in arrow flows similar to the used in SIP RFCs.
The aim of this tool is to make easier the process of learnig or debugging SIP.
Features:
* Capture SIP packets from devices or read from PCAP file
* Supports UDP, TCP and TLS (partially) transports
* Allows filtering using BPF (Berkeley Packet Filter)
* Save captured packets to PCAP file
 Homepage
 Download
Recent Releases
1.8.426 Jul 2026 03:15
minor feature:
Call flow: add RTP stream statistics to call flow UI.
Call list: add SIP Contact column to F10 call list selection.
Save: new parameter to disable edition of the save path.
Options: set default savepath to user homedir.
Rtp: heap out of bounds read in RTCP XR block parser.
Sip: stack buffer overflow on non-numeric Warning header.
Util: check valid length parameter in sng_strncpy.
Call flow: alias display on columns for IPv6 addresses.
Build: use libpcre3 over libpcre2 on old distributions.
Build: build rpm spec across EL7-10, Fedora and openSUSE.
1.8.308 Feb 2026 03:15
minor bugfix:
Capture: add support for telephony-event rtp streams (RFC 4733).
Capture: replace fake HEP frames for network captured packets.
Call flow: limit call-id displayed on title to 125 characters.
Rtp: duration value in telephony-event is incorrectly converted.
Core: out of bound arrays crashes.
Eep: multiple memory crashes in HEP parsing.
Ipv6: incorrect payload length for fragmented IPv6 packets.
Build: use libgcrypt-config if pkg-config is not available for libcrypt.
1.8.211 Mar 2025 14:35
minor bugfix:
capture: fix possible buffer overflow while processing RTP payload
1.4.507 May 2018 12:59
minor feature:
* save: avoid crashing when multiple source inputs are used
* call list: fix buffer overflow in display filter with wide terminals
* capture: added new setting capture.tlsserver to only process TLS packets to tha address
* capture: fixed compatibility with OpenSSL = 1.1.0
* capture: only read stdin when input file is '-'
| 
