Re: Best way to descrypt/inspect SIP TLSv1.3 traffic

For easy troubleshooting you can use sngrep:
https://voipembedded.wordpress.com/2021/03/22/troubleshooting-kamailio-encrypted-sip-traffic/

Note: you don’t really need to setup the .sngrephep2rc file anymore.

-ovidiu

On Tue, Feb 10, 2026 at 12:44 Benedito Marques via sr-users <
[email protected]> wrote:

> Thanks.
>
> On Tue, Feb 10, 2026 at 1:51 PM Daniel-Constantin Mierla <
> [email protected]> wrote:
>
>> Hello,
>> On 10.02.26 13:56, Benedito Marques via sr-users wrote:
>>
>> Hello everyone!
>>
>> Currently, what is the best way/approach to generate pcap files with
>> decrypted SIP TLS traffic when using Kamailio (besides HEP or plain text
>> files generated by sipdump)?
>>
>> the sipdump can generate pcap files as well, if you set mode value 4.
>> Just that in the pcap the sip message look like being received over UDP,
>> however the sip headers can indicate the real protocol (and with mode value
>> 8 you get a meta-info header making it clear what was the transport
>> protocol). You can view the pcap in the wireshark or sngrep just fine.
>>
>> Cheers,
>> Daniel
>>
>> --
>> Daniel-Constantin Mierla (@ asipto.com)twitter.com/miconda -- linkedin.com/in/miconda
>> Kamailio Consultancy, Training and Development Services -- asipto.com
>> Kamailio World Conference, May 7-8, 2026 - Berlin, Germany -- kamailioworld.com
>>
>>
>
> --
>
> Att,
> Benedito Marques
> __________________________________________________________
> Kamailio - Users Mailing List - Non Commercial Discussions --
> [email protected]
> To unsubscribe send an email to [email protected]
> Important: keep the mailing list in the recipients, do not reply only to
> the sender!
>

__________________________________________________________
Kamailio - Users Mailing List - Non Commercial Discussions -- [email protected]
To unsubscribe send an email to [email protected]
Important: keep the mailing list in the recipients, do not reply only to the sender!