sngrep is a terminal tool that groups SIP (Session Initiation Protocol) Messages by Call-Id, and displays them in arrow flows similar to the used in SIP RFCs.
The aim of this tool is to make easier the process of learnig or debugging SIP.
Features:
* Capture SIP packets from devices or read from PCAP file
* Supports UDP, TCP and TLS (partially) transports
* Allows filtering using BPF (Berkeley Packet Filter)
* Save captured packets to PCAP file
 Homepage
 Download
Recent Releases
1.8.308 Feb 2026 03:15
minor bugfix:
Capture: add support for telephony-event rtp streams (RFC 4733).
Capture: replace fake HEP frames for network captured packets.
Call flow: limit call-id displayed on title to 125 characters.
Rtp: duration value in telephony-event is incorrectly converted.
Core: out of bound arrays crashes.
Eep: multiple memory crashes in HEP parsing.
Ipv6: incorrect payload length for fragmented IPv6 packets.
Build: use libgcrypt-config if pkg-config is not available for libcrypt.
1.8.211 Mar 2025 14:35
minor bugfix:
capture: fix possible buffer overflow while processing RTP payload
1.4.507 May 2018 12:59
minor feature:
* save: avoid crashing when multiple source inputs are used
* call list: fix buffer overflow in display filter with wide terminals
* capture: added new setting capture.tlsserver to only process TLS packets to tha address
* capture: fixed compatibility with OpenSSL = 1.1.0
* capture: only read stdin when input file is '-'
| 
