Traffic Analysis Using Sngrep
Last updated
Was this helpful?
English
Last updated
Was this helpful?
Sngrep is a command-line tool for capturing and analyzing SIP traffic. It allows you to visualize SIP sessions, filter them, and track issues in voice connections.
To start working with the application, follow the SSH connection to the PBX .
To start the application, use the command:
If multiple network interfaces are used, specify the interface ID when launching the application:
The -r key allows capturing audio traffic.
You can view the list of interfaces using the following command:
Example of Sngrep Interface:
The application window displays a list of all SIP dialogues:
Use the ⇑ and ⇓ arrows to navigate between dialogues.
Press Enter to view detailed information about a dialogue.
In the detailed view, you can examine specific SIP packets by selecting them with ⇑ and ⇓.
Press Enter to view the contents of a SIP packet.
Press ESC to return to the previous window.
Use the Space key to select multiple SIP dialogues and press Enter to view them in one window.
In the detailed view, use the Space key to select two SIP packets for comparison.
Use the Space key to select the SIP dialogue "Call" of interest.
Press F2 to open the save dump dialogue:
Use the ⇑ and ⇓ arrows to navigate between form fields.
Enter the path and file name.
Select the save action and press ENTER.
Press F7 to open the filter dialogue:
Use the ⇑ and ⇓ arrows to navigate between form fields.
Use the Space key to select SIP methods for analysis.
Select the Filter action and press ENTER.
Download the file using .
