- Home
- VoIP Monitoring Software
- sipmon
sipmon
What it is
sipmon is an open-source Linux monitor for SIP signaling and RTP media quality. It runs as a standalone Rust executable without a PBX and accepts live interface captures, pcap or pcapng files, tcpdump input from standard input, and recorded event logs. Calls and SIP transactions are correlated by Call-ID, with SIP-over-TCP reassembly. Media reporting covers RFC3550 jitter and packet loss, RTCP round-trip time, one-way delay estimates, and estimated E-model MOS. More than 20 diagnostic rules address Contact reachability, Record-Route, SDP/RTP consistency, one-way media, and TURN allocation or refresh. sipmon can learn TURN servers and label relay legs. Its terminal interface includes overview, call detail, SIP statistics, streams, event log, and IP statistics pages, with JSONL exports and Call-ID queries. Event logs retain summaries and truncated SIP messages, not raw RTP payload.
For and against
For
- Open-source standalone Rust executable
- Reads live captures and offline packet files
- Reports jitter, loss, delay, and MOS
- More than 20 diagnostic rules
- Provides terminal views and JSONL exports
Against
- Linux-only platform listing
- Capture can compete for CPU on busy relay hosts
- Raw RTP payload is not stored
- Memory defaults cap calls and stream entries
The verdict
sipmon offers passive SIP/RTP diagnostics with multiple capture inputs, media metrics, TURN labeling, and scriptable exports. High-rate relay environments may need filtered traffic or a dedicated mirrored capture setup.
Who it suits
It suits Linux operators and VoIP engineers analyzing live, recorded, or replayed SIP/RTP traffic without depending on a running PBX.
On the record
- Call analysis
- It correlates SIP transactions and calls by Call-ID and supports SIP-over-TCP reassembly.github.com · read 8 Oct 2026
- Capture caveat
- On busy relay hosts capture competes with rtpengine for CPU; the README recommends filtering traffic or using a dedicated mirrored capture box at high packet rates.github.com · read 4 Oct 2026
- Capture inputs
- It can analyze live interfaces, offline pcap/pcapng files, tcpdump streams from stdin, and recorded event logs.github.com · read 8 Oct 2026
- Deployment
- The README describes deployment on a mirrored port or packet-capture box, with live, record, replay, and headless modes.github.com · read 8 Oct 2026
- Diagnostics
- The project describes 20+ diagnostic rules covering Contact reachability, Record-Route, SDP/RTP consistency, one-way media, and TURN allocation or refresh.github.com · read 8 Oct 2026
- Integration
- The README documents capturing Kamailio SIP and rtpengine media together, including a topology where SIP is mirrored to the rtpengine host.github.com · read 8 Oct 2026
- Integrations
- The README documents piping a live tcpdump capture into sipmon and describes capture setups involving Kamailio and rtpengine.github.com · read 4 Oct 2026
- Interface and exports
- It provides a terminal UI with Overview, Call Detail, SIP Stats, Streams, Event Log, and IP Stats pages, plus JSONL exports and Call-ID queries.github.com · read 4 Oct 2026
- Interfaces and exports
- It provides a terminal UI, JSONL exports, and a query command that retrieves a Call-ID flow for scripting.github.com · read 8 Oct 2026
- Linux binaries
- Prebuilt static Linux binaries are offered for x86_64 and aarch64, and the README also gives a Cargo installation option.github.com · read 8 Oct 2026
- Linux downloads
- The README says prebuilt static binaries are available for Linux x86_64 and aarch64, with installation from GitHub Releases or Cargo.github.com · read 4 Oct 2026
- Maker
- The repository links to miuda.ai, whose linked About page says the company was founded by a team of telecommunications and AI experts; it does not state a founding year or headquarters.miuda.ai · read 8 Oct 2026
- Media metrics
- It reports RFC3550 jitter and loss, RTCP receiver-report RTT, estimated one-way delay, and estimated E-model MOS.github.com · read 8 Oct 2026
- Packet data
- The event log stores analysis summaries and truncated raw SIP messages, and the README says raw RTP payload is not stored.github.com · read 8 Oct 2026
- Privacy and storage
- The event log stores analysis summaries and truncated raw SIP messages, and the README states that raw RTP payload is not stored.github.com · read 4 Oct 2026
- Purpose
- sipmon is a passive SIP/RTP signaling and media quality monitor that runs as a standalone Rust executable without depending on a running PBX.github.com · read 8 Oct 2026
- SIP analysis
- It correlates SIP calls and transactions by Call-ID and supports SIP-over-TCP reassembly.github.com · read 4 Oct 2026
- Storage limits
- The documented defaults include a 100,000-call memory cap, a 15-minute call TTL, and 50,000-entry caps for RTP streams and diagnostics.github.com · read 8 Oct 2026
