- Home
- VoIP Monitoring Software
- sip-exporter
sip-exporter
What it is
sip-exporter is a free, open-source Linux sensor that turns observed SIP signaling and related RTP traffic into Prometheus metrics and Grafana dashboards. Its `/metrics` endpoint reports SIP traffic and session measures, RFC 6076 performance data, RTP and RTCP statistics, fraud indicators, and diagnostics. RTP analysis includes jitter, packet loss, packet-delay variation, and E-model MOS; RTCP statistics include loss, jitter, and round-trip time correlated by SSRC. Documented fraud signals include registration scans, INVITE bursts, account takeover after a registration country change, and False Answer Supervision. The repository includes a Grafana dashboard with 11 sections and examples of Prometheus alert rules. Metrics are documented for Prometheus, VictoriaMetrics, Grafana Cloud, and compatible scrapers. The single-container deployment requires privileged access and host networking. The sensor needs to observe both signaling and media on the same call path. Capture supports IPv4/UDP SIP and related RTP/RTCP; IPv6, fragmented UDP, and SIP over TCP or TLS are unsupported. The project says it does not store packets or audio, though RTP snapshots copied to userspace may include a small payload prefix.
For and against
For
- Free, open-source project
- Reports RTP jitter, loss, and MOS
- Includes a Grafana dashboard
- Prometheus alert-rule examples are documented
- Does not store packets or audio
Against
- IPv6 traffic is unsupported
- SIP over TCP or TLS is not captured
- Requires privileged access and host networking
- Must observe signaling and media on the same call path
The verdict
sip-exporter offers detailed SIP and media metrics, dashboard support, and documented fraud indicators. Its capture limits and host-placement requirements make supported traffic visibility essential.
Who it suits
This suits Linux operators who need SIP and RTP/RTCP monitoring in Prometheus-compatible systems and can run a privileged, host-networked container where both signaling and media are visible.
Plans and prices
AGPL-3.0 open-source
Free for personal and educational use; free for commercial use with conditions under AGPL-3.0
Read 5 Oct 2026 · github.com
On the record
- Capture
- It captures IPv4/UDP SIP and correlated RTP/RTCP; SIP over TCP or TLS is not captured.github.com · read 5 Oct 2026
- Capture method
- An eBPF socket filter selects IPv4 SIP packets over UDP for userspace processing; SIP over TCP or TLS is not captured.github.com · read 5 Oct 2026
- Dashboard and alerts
- The repository includes a Grafana dashboard and documented Prometheus alert-rule examples, with Alertmanager examples for Slack, PagerDuty, and email.github.com · read 5 Oct 2026
- Data handling
- The project says it does not store packets or audio; its RTP processing parses the fixed RTP header and does not inspect or persist audio.github.com · read 5 Oct 2026
- Deployment
- The project provides a single-container deployment and says the container must run privileged with host networking to access eBPF and the network interface.github.com · read 5 Oct 2026
- Fraud signals
- Documented fraud signals include registration scans, INVITE bursts, account takeover after a registration country change, and False Answer Supervision.github.com · read 5 Oct 2026
- Grafana dashboard
- The repository includes a Grafana dashboard with 11 sections and documented Prometheus alert-rule examples.github.com · read 5 Oct 2026
- Integrations
- The Prometheus-format metrics are documented as compatible with Prometheus, VictoriaMetrics, Grafana Cloud, and other Prometheus-compatible scrapers.github.com · read 5 Oct 2026
- License
- The project is licensed under AGPL-3.0 and says modified network-accessible versions must offer users the corresponding source under the license terms.github.com · read 5 Oct 2026
- Limits
- The sensor requires a host that sees IPv4/UDP SIP signaling and the correlated RTP/RTCP path; IPv6, fragmented UDP, SIP over TCP/TLS, and mirrored traffic for trustworthy QoE/direction are unsupported.github.com · read 5 Oct 2026
- Metrics
- It exposes SIP traffic, active-session, RFC 6076 performance, RFC 6035 voice-quality, RTP, RTCP, fraud, and diagnostic metrics at `/metrics`.github.com · read 5 Oct 2026
- Network placement
- For full metrics, the sensor must run on a host that sees both SIP signaling and RTP media on the same call path.github.com · read 5 Oct 2026
- Privacy
- The README says the exporter does not store packets or audio and parses only the fixed 12-byte RTP header, while RTP snapshots copied to userspace may include a small payload prefix.github.com · read 5 Oct 2026
- Purpose
- sip-exporter is an open-source eBPF sensor that turns SIP signaling and correlated RTP traffic observed on a Linux host into Prometheus metrics and Grafana dashboards.github.com · read 5 Oct 2026
- RTCP support
- It reports RTCP receiver and sender statistics, including loss, jitter, and round-trip time, correlated by SSRC.github.com · read 5 Oct 2026
- RTP quality
- RTP analysis includes jitter, packet loss, packet-delay variation, and E-model MOS for streams correlated with SIP dialogs.github.com · read 5 Oct 2026
- SIP and RTP metrics
- The exporter reports SIP traffic and session metrics, RFC 6076 performance metrics, and RTP quality metrics including packet loss, jitter, and MOS.github.com · read 5 Oct 2026
- Support
- The project directs users to GitHub Issues for support, bug reports, and feature requests, and to its security policy for private vulnerability reports.github.com · read 5 Oct 2026
